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EDITOR’S  NOTE 


Don  Tennant 


Their  Keep 


NE  OF  the  reasons  I  enjoy  covering  the  IT  profes¬ 
sion  so  much  is  that  if  you  put  five  IT  pros  in  a 
room  to  discuss  a  particular  topic,  you’re  likely  to 
get  at  least  six  different  opinions  about  it.  So  when  I 
raised  the  issue  of  substance  abuse  within  the  IT  industry  in 


!  my  blog  last  week,  I  fully 
'  expected  to  get  the  full 
j  gamut  of  reader  comments. 
I  wasn’t  disappointed. 

It  was  a  reader  who 
!  raised  the  question  in  the 
;  first  place,  and  as  I  said  in 
j  my  blog  post,  I  hadn’t  giv- 
j  en  the  issue  much  thought. 

J  So  I  just  threw  the  ques- 
\  tion  out  there:  Based  on 
!  your  experience,  how 
*  widespread  is  substance 
|  abuse  among  people  in  the 
J  IT  field?  Not  surprisingly, 

\  some  of  that  experience 
!  has  been  painful. 

“Prior  to  finally  sobering 
up  two  years  ago,  I  regular- 
j  ly  spent  many  an  evening 
!  doing  remote  support  from 
!  inside  a  bottle,”  one  reader 
j  wrote.  “Long  nights  and  the 
;  morning  after  were  almost 
;  always  propped  up  with 
J  pills.  This  coping  strategy 
!  was  learned  from  the  other 
pros  that  I  worked  with  at 
;  three  separate  shops.” 

Another  reader  said  that 
his  drinking  problem  led 
I  him  to  seek  treatment  and 
to  ultimately  become  a 
substance  abuse  counselor. 
J  Many  of  his  clients  “were 
!  brilliant  in  their  computer- 
!  related  fields,”  he  said,  “but 
also  abused  alcohol  and 
illegal  drugs.” 


It’s  an  emotional  issue,  to 
be  sure.  Just  raising  it  was 
enough  to  anger  one  reader. 

“Simply  asking  the  ques¬ 
tion,  ‘Is  my  profession  rife 
with  substance  abuse?’ 
plays  right  into  the  agenda 
of  the  drug  warriors,  who 
are  addicted  to  something 
more  powerfully  destruc¬ 
tive  and  addictive  than 
heroin  or  crack:  power,”  he 
wrote.  He  railed  against 
“rampant  drug  testing 
[that]  has  driven  a  lot  of 
pot  smokers  out  of  IT,”  and 
he  insisted  that  there’s  no 
evidence  that  drug  testing 
increases  productivity. 

Other  readers  agreed 
that  there  are  fewer  abus¬ 
ers  now  than  there  were  in 
the  past.  “I’ll  admit  when 
I  started  in  this  field  [15 
years  ago],  there  seemed 
to  be  a  high  percentage  of 
pot-headed  programmers,” 
one  wrote.  “I  don’t  know 
of  anyone  these  days  who 
uses  and  abuses  anything 

H  One  reader 
clearly  misses 
the  good  old  days 
of  hard  partying 
with  alcohol,  pot 
and  piSu 


other  than  caffeine.” 

One  reader  clearly  miss¬ 
es  the  good  old  days. 

“After  spending  almost 
30  years  as  a  professional 
software  engineer ...  I  have 
seen  just  about  every  and 
anything  ‘abused.’  Alcohol, 
pot,  pills  . . .  have  all  been  a 
part  of  every  hard-working, 
hard-partying,  high- 
performance  group  I’ve 
seen,”  he  wrote.  “Granted, 
these  days  with  the  influx 
of  so  many  third-world 
engineers,  whose  family 
heritage  and  religions  take 
a  dim  view  of  these  activi¬ 
ties,  the  fun  part  of  soft¬ 
ware  development  is  dying 
out,  as  is  the  humor.  Too 
damn  bad,  IMHO.” 

And  from  the  opposite 
end  of  the  spectrum:  “As  a 
supervisor,  I  will  not  trust 
[substance  abusers]  to  exer¬ 
cise  good  judgment  or  hold 
a  trusted  position,”  wrote 
a  reader  who  showed  little 
patience  for  downplaying 
the  issue.  “How  can  they 
possibly  have  the  interests 
of  the  company  in  mind 
if  they  are  tearing  them¬ 
selves  apart?” 

Of  course,  the  expres¬ 
sion  of  all  these  views  still 
doesn’t  answer  the  initial 
question.  How  widespread 


is  substance  abuse  among 
people  in  the  IT  field? 

A  June  2007  study  by  the  ! 
U.S.  Department  of  Health 

and  Human  Services  found  > 

% 

that  IT  professionals  are 
on  the  lower  end  of  the 
substance-abuse  scale. 
Occupations  were  catego¬ 
rized  into  “management” 
(which  includes  computer 
and  information  systems 
managers)  and  “math¬ 
ematical  and  computer 
scientists”  (which  includes  j 
programmers,  software 
engineers,  systems  ana¬ 
lysts,  and  database  and 
network  administrators). 

I 

The  percentage  of  work¬ 
ers  using  illicit  drugs  in 
the  past  month  was  6.1  for 
management  and  6.9  for 
the  math/computer  group. 

The  numbers  for  heavy  al¬ 
cohol  use  in  a  given  month 
were  7.9  and  5.9,  respec¬ 
tively.  In  comparison,  17.4%  \ 

of  food  service  workers  re¬ 
ported  using  illicit  drugs  in  I 
the  past  month,  while  17.8%  5 

of  construction  workers  re-  | 

ported  heavy  alcohol  use. 

Those  numbers,  which 
are  based  on  data  collected 
from  2002  to  2004,  are  en¬ 
couraging,  and  anecdotal 
evidence  suggests  that  they  \ 
might  be  even  lower  now. 
Maybe  those  people  with 
different  family  heritages 
and  religions  have  earned 
their  keep  after  all.  ■ 

Don  Tennant  is  editorial 
director  o/Computerworld  ! 
and  InfoWorld.  Contact 
him  at  don_tennant@ 
computerworld.com,  and 
visit  his  blog  at  http:// 
blogs.computerworld. 
com/tennant. 
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■  LETTERS 


Another  Threat  to 
The  IT  Profession 

As  long  as  only  a  small  percentage 
of  businesses  follow  the  path  de¬ 
scribed  in  the  Feb.  19  article  “IT  Ca¬ 
reer  Paths  You  Never  Dreamed  Of,” 
there  will  be  no  problem.  But  if  all 
businesses  follow  the  “no  tradition¬ 
al  IT  career”  trend,  there  will  be  no 
motivation  for  entry-level  people  to 
learn  their  craft  and  broaden  their 
knowledge  of  business.  We  have  al¬ 
ready  seen  this  with  the  decrease  in 
computer  science  majors. 

The  companies  that  choose  this 
path  assume  that  all  strategic  tech¬ 
nology  integration  is  over.  I  would 
suggest  that  we  are  at  the  end  of 
the  beginning  of  the  IT  integration 
cycle,  waiting  for  another  major  in¬ 
dustrial  technological  infusion. 

■  Raymond  Crews,  McAllen,  Texas 

Doubts  About  How  Far 
Integration  Can  Go 

It’s  true  that  IT  people  have  had 
to  acquire  more  business  skills  to 
do  their  jobs  effectively.  I’m  not 
sure,  though,  to  what  extent  IT 
people  will  ever  actually  integrate 
or  morph  into  the  business  itself, 
as  CSC  CIO  David  McCue  seems 
to  envision  [“IT  Anachronism,” 
Editor’s  Note,  Feb.  25]. 


The  problem  is  implicit  in  the 
analogy  Don  Tennant  used  in  his 
column.  People  (and  businesses) 
integrated  into  the  Internet  because 
a  variety  of  easy-to-use  tools  (like 
Web  browsers)  and  services  (like 
wikis  and  portals)  sprang  into  be¬ 
ing.  It’s  very  easy  now  for  almost 
anyone  to  book  a  vacation,  search 
for  information,  purchase  books 
and  CDs,  socialize  with  their  peers 
or  manage  their  investments  online. 

However,  creating  business  ap¬ 
plications  still  seems  to  require 
enormous  amounts  of  effort  (and 
time  and  money),  along  with  the 
specialized  skills  of  dedicated 
professionals.  Business  users  don’t 
yet  have  the  tools  to  create  their 
own  applications,  nor  would  most 
of  them  wish  to  do  so  if  it  required 
specialized  knowledge  or  took  too 
much  time  from  their  work.  If  and 
when  business  users  are  able  to 
create  their  own  apps  quickly  and 
easily,  then  IT  people  will  have  to 
morph  into  the  business  as  “tech¬ 
nology  mentors,”  as  McCue  puts  it, 
or  become  obsolete.  Until  then,  IT 
people  will  probably  have  to  remain 
separate  from  the  business  and  fo¬ 
cus  on  trying  to  stay  at  least  even 
with  business  requirements. 

■  Larry  Burns,  database  consultant, 
PACCAR  ITD,  Renton,  Wash., 
lburns@paccar.com 
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SECURITY 

Vermont  Ski  Area  Reports 
Hannaford-like  Data  Theft 


IN  A  SECURITY  BREACH  that 
sounds  similar  to  the  one 
disclosed  by  Hannaford 
Bros.  Co.  last  month,  the 
Okemo  Mountain  Resort  in 
Vermont  said  last  week  that 
data  from  more  than  46,000 
credit  and  debit  card  trans¬ 
actions  may  have  been  com¬ 
promised  during  a  system 
intrusion  in  February. 

Okemo  said  in  a  security- 
advisory  on  its  Web  site 
that  the  breach  may  have 
exposed  data  from  payment 
cards  used  at  the  ski  area  be¬ 
tween  Feb.  7  and  22,  the  time 
frame  in  which  the  intrusion 
took  place.  The  intruder  or 
intruders  may  also  have  ac¬ 
cessed  data  from  card  trans¬ 


actions  processed  between 
January  and  March  of  2006, 
according  to  the  advisory. 

Okemo  spokeswoman 
Bonnie  MacPherson  said 
that  the  data  from  the  cards 
used  in  February  appears 
to  have  been  stolen  as  the 
transactions  were  being 
authorized.  “This  was  a 
real-time  theft,”  she  said. 
“The  information  was  being 
taken  as  the  cards  were  be¬ 
ing  swiped.” 

If  that  is  actually  the  case, 
it  could  make  the  breach  at 
Okemo  a  close  cousin  to  the 
much  larger  one  announced 
by  Hannaford  on  March  17. 
Flannaford  said  in  a  notifi¬ 
cation  letter  sent  to  Massa¬ 


chusetts  officials  last  month 
that  malware  installed  on 
servers  in  each  of  its  gro-* 
eery  stores  intercepted  card 
data  as  the  information  was 
being  transmitted  from 
point-of-sale  systems  during 
the  authorization  process. 

Up  to  4.2  million  credit 
and  debit  card  numbers, 
plus  the  expiration  dates  of 
the  cards,  were  stolen  by  the 
malware  program  and  sent  to 
a  server  hosted  by  a  foreign 
ISP,  Hannaford  said.  The 
Scarborough,  Maine-based 
grocer  said  the  discovery 
of  the  malware  installation 
prompted  a  wholesale  re¬ 
placement  of  its  store  servers. 

Hannaford  and  Okemo 
may  not  be  the  only  busi¬ 
nesses  disclosing  breaches 
involving  payment-card  data 
in  transit  between  systems. 
According  to  McPherson, 
law  enforcement  authorities 
who  are  investigating  the 
breach  at  Okemo  told  resort 
officials  that  they  are  look¬ 
ing  into  about  50  reported 
incidents  of  the  same  sort  in 
the  Northeast  alone. 

McPherson  said  the  sys¬ 
tem  intrusion  was  discov¬ 
ered  in  late  February,  but 
she  declined  to  comment  on 
how  the  resort  learned  of  it, 
citing  the  ongoing  investiga¬ 
tion.  She  added  that  Okemo 
has  taken  steps  to  close  the 
breach  and  prevent  further 
intrusions  but  again  didn’t 
disclose  any  specific  details. 

—  Jaikumar  Vijayan 


According  to  the  govern- 
ment’s  USAspending.gov 
Web  site,  IBM  won  contracts 
worth  $1.4  billion  during  the 
2007  federal  fiscal  year. 


IBM’s  problems  may  not  be 
over,  though.  The  company 
still  faces  an  investigation 
by  the  EPA  into  possible  vio¬ 
lations  of  federal  procure¬ 
ment  integrity  rules.  In  ad¬ 
dition,  federal  prosecutors 
in  Virginia  have  launched  a 
grand  jury  probe  focusing  on 
“interactions  between  em¬ 
ployees”  of  IBM  and  the  EPA, 
accordihg  to  the  company. 

IBM  said  Friday  that  it  will 
continue  to  cooperate  with 
federal  officials  on  both  of 
the  investigations. 

-PATRICK  THIBODEAU 


THE  WEEK  AHEAD 

MONDAY:  Storage  Networking  World  Spring  2008,  which  is 
run  by  Computerworld,  opens  in  Orlando. 

MONDAY:  The  executive  advisory  board  of  the  MIT  Kerberos 
Consortium  is  due  to  meet,  with  Microsoft  taking  part  for  the 
first  time  after  joining  the  single-sign-on  group  last  week. 

TUESDAY:  Microsoft  plans  to  issue  eight  software  updates 
as  part  of  its  monthly  patch  release.  Meanwhile,  the  security- 
focused  RSA  Conference  2008  starts  in  San  Francisco. 


Feds  Ban, 
Then  Allow, 
Bids  by  IBM 

IBM  disclosed  last  Monday 
that  it  had  been  temporarily 
suspended  from  seeking 
federal  IT  contracts  because 
of  dual  investigations  into  a 
bid  it  submitted  to  the  U.S. 
Environmental  Protection 
Agency  in  March  2006. 

But  the  suspension,  which 
was  imposed  by  the  EPA  on 
March  27,  barely  lasted  a 
week.  IBM  and  the  General 
Services  Administration 
said  separately  on  Friday 
that  the  EPA  had  lifted  the 
ban  on  bids  by  the  vendor. 
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INFRASTRUCTURE  LOG 


_DAY  79:  Our  IT  environment  is  rigid  and  inflexible. 

We  can’t  adapt  to  our  changing  business  needs.  Oh  no.. 
I  was  afraid  of  this.  We’re  so  rigid,  we’re  stuck  in  time. 

.Infrostructurus  prehistoricus.  I’ve  read  about  this. 

_DAY  80:  I’m  taking  back  control  with  IBM  SOA  solutions 
Now  we  have  the  hardware,  software  and  services 
we  need  to  respond  to  change.  IT  strategy,  planning  and 
implementation  are  in  tune  with  our  specific  business 
needs.  We’re  deploying  and  updating  business  processes 
faster  and  more  efficiently.  We’re  evolving! 

_Good-bye,  j«id  past,  ■ellcw  flexity^Suigr<^ 


larks-or  j^is^re# trademarks. 


lirtess  Machiries  Corporator  in  tt'ie 


log©8 WebSphere  and  lake  Back 
Corporation.  All  rights  reserved.  ■ 
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NEWS  DIGEST 


SOFTWARE 


Open  XML  Passes  ISO 
Test  on  Its  Second  Try 


M 


ICROSOFT  Corp.’s 
effort  to  speed 
the  adoption  of 
its  Office  Open 
XML  document  format 
passed  a  crucial  test  last 
week  with  the  ISO  interna¬ 
tional  standards  body’s  ap¬ 
proval  of  the  specification 
as  a  draft  standard. 

The  Open  XML  specs 
must  now  make  their  way 
through  the  Geneva-based 
organization’s  formal  two- 
month  appeals  process. 

Any  of  the  41  countries  that 
participated  in  the  develop¬ 
ment  of  the  draft  standard 
can  appeal  the  ISO  vote. 

Tom  Robertson,  general 
manager  of  interoperability 
and  standards  at  Micro¬ 
soft,  said  the  vote  showed 
“overwhelming  support” 
for  Open  XML,  with  86% 
of  voters  approving  the 
proposed  standard. 

Nonetheless,  analysts 
said  there’s  a  good  chance 
that  the  vote  will  be  ap¬ 
pealed. 

Protests  over  the  ISO 
voting  process  and  out¬ 
comes  are  not  uncommon, 


noted  Jan  van  den  Beld,  a 
consultant  who  does  work 
for  the  Computing  Technol¬ 
ogy  Industry  Association. 

Already,  some  members 
of  the  Norwegian  stan- 


OPEN  XML 

Path  to  Approval 

Ecma 

approves  format  as  standard. 


I-  vc  •  ?  ISO  rejects1  ■ 

Open  XML  proposal. 


ISO  tentatively 
w  Open  XML  plan. 


Period  to  appeal 
nds. 
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dards  committee  have 
asked  that  country’s  Min¬ 
istry  of  Trade  and  Industry 
to  investigate  the  voting 
process.  They  contend  that 
Norway  voted  for  the  stan¬ 
dard  even  though  a  major¬ 
ity  of  committee  members 
were  against  it. 

Michiel  Leenaars,  a 
member  of  the  Nether¬ 
lands’  national  standards 
committee  and  a  backer  of 
the  rival  Open  Document 
Format  for  Office  Applica-  ! 


GOVERNMENT 


Treasury  Wants  IT  Link  for 
Monitoring  Financial  Firms 


TO  ENSURE  THAT  federal  of¬ 
ficials  are  “instantaneously” 
made  aware  of  problems  in 
financial  markets,  the  U.S.  De¬ 
partment  of  the  Treasury  wants 
banks,  insurers  and  financial 
services  firms  to  provide  regu¬ 
lators  with  real-time  data  on 
their  business  operations. 

But  doing  so  would  likely 
require  the  financial  industry  to 


tions  (ODF),  asserted  that 
Open  XML  still  isn’t  ready 
for  use. 

“It  would  have  been  bet¬ 
ter  for  the  world,  probably, 
if  it  had  gone  back  to  the 
drawing  board  and  come 
back  as  an  ISO  standard 
in  two  years,  with  all  the 
work  done,”  Leenaars  said. 

ODF  is  already  an  ISO 
standard. 

After  standards  group 
Ecma  International  ratified 
Open  XML  in  December 
2006,  it  proposed  the  Mi¬ 
crosoft  file  format  as  an 
ISO  standard. 

After  an  unsuccessful 
ISO  vote  to  approve  Open 
XML  last  September,  Ecma 
modified  the  specification 
based  on  thousands  of 
comments  submitted  by 
vendors  and  members  of 
national  standards  bodies. 

If  Open  XML  survives 
the  appeals  process,  the 
next  step  for  Microsoft  will 
likely  be  a  proper  imple¬ 
mentation  of  the  standard 
in  Office  2007  —  the  suite 
that  sparked  a  file  format 
war  because  it  lacked  ODF 
technology. 

—  Peter  Sayer, 
IDG  News  Service 


Short 

Takes 


Dell  Inc.  plans  to  cut 
costs  by  S3  billion  by 
reducing  operating  ex¬ 
penses,  including  elimi¬ 
nating  8,800  jobs  and  a 
PC  manufacturing  plant  in 
Austin.  Dell  said  it  has  al¬ 
ready  decreased  its  work¬ 
force  by  3,200  people. 

has  hired 

Google  Inc.  CIO  Douglas 
Merrill  to  head  its  digital 
business  division.  The 
move  comes  less  than  a 
month  after  the  departure 
of  Sheryl  Sandberg,  who 
resigned  as  Google’s  vice 
president  of  online  sales 
and  operations  to  become 
COO  at  rival  Facebook  Inc. 

The  U.S.  Department  of 
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granted  South  Carolina  an 
extension  for  complying 
with  the  controversial  fed¬ 
eral  Real  ID  program.  The 
DHS  extended  the  dead¬ 
line  despite  the  state’s 
refusal  to  comply  with  the 
law’s  mandates. 

Intel  Corp.  unveiled  its 
low-power,  newly  archi¬ 
tected  Atom  processor 
line  at  its  developer  forum 
in  Shanghai.  The  chips  are 
aimed  at  the  embedded 
and  mobile  Internet  device 
markets. 
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adopt  new  technologies  -  and 
spend  a  good  deal  of  money. 

The  Treasury  made  its  pitch 
for  using  IT  to  modernize  the 
regulatory  process  in  a  blueprint 
document  released  last  week. 
Agency  officials  hope  to  use  the 
IT  equivalent  of  a  heart  monitor 
attached  to  financial  services 
firms  to  help  prevent  future 
problems  similar  to  the  ones 


■ '  i 

now  afflicting  the  financial 
markets  -  the  subprime  mort¬ 
gage  crisis,  for  instance. 

But  that  won’t  happen  over¬ 
night,  and  Treasury  Secretary 
Henry  Paulson  said  the  blue¬ 
print’s  recommendations  won’t 
fix  the  current  problems.  He 
took  pains  to  point  out  that  the 


proposal  is  just  the  start  of  a 
discussion  that  “will  not  be 
resolved  this  month  or  even 
this  year.” 

But  if  the  Treasury’s  recom¬ 
mendations  do  become  a  new 
framework  for  regulation,  “the 
impact  would  be  huge,”  said 
Jeanne  Capachin,  an  analyst  at 
IDC’s  Financial  Insights  unit.  Ca¬ 
pachin  added  that  many  financial 
services  firms  have  yet  to  install 
the  kind  of  dashboard  systems 
the  agency  is  calling  for. 

-PATRICK  THIBODEAU 
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.INFRASTRUCTURE  LOG 


_DAY  94:  Finding  critical  customer  information  is 
impossible.  We  can’t  find  the  data  we  need.  How  can  we 
put  our  info  to  good  use  if  it’s  not  at  our  fingertips? 


_Gil  installed  a  transporter.  Says  he  can  instantly  beam 
people  to  data...and  that  marketing  is  stuck  in  hyperspace. 


_DAY  97:  The  answer:  IBM  Global  Business  Services  and  an 
IBM  InfoSphere™  Master  Data  Management  Server.  Now  we  have 
real-time  access  to  our  customer  information  in  a  single 
view.  We  can  deliver  trusted  info  to  people,  processes  and 
apps.  And  we  can  use  it  to  drive  better  business  results. 

_0ops...I  just  beamed  Gil  to  Mexico,  i Lo  siento,  mi  amigo! 


\  " . 7.  A 


/ 


Watch  the  Master  Data  Management  demo  at: 

IBM.COM/TAKEBACKCONTROL/DATA 


IBM,  the  IBM  logo,  InfoSphere  and  Take  Back  Control  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and, tor  other 
©2008  IBM  Corporation.  All  rights  reserved. 


Information  Management 
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BETWEEN  THE  LINES 


By  John  Klossner 
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WEB  2.0 

IBM,  Linden  Plan  Corporate 
Version  of  Second  Life 

Forrester  Research 
Inc.,  said  the  joint 
effort  may  address 
corporate  concerns  * 
about  the  security 
of  virtual  worlds. 

He  noted  that  the  j 
technology  under¬ 
lying  virtual  worlds  j 
“wasn’t  an  infra¬ 
structure  designed 
to  be  particularly 
secure  or  robust 

for  enterprise  applications.”  { 

IBM’s  involvement  should 
help  convince  IT  managers 
to  try  the  technology,  he  said. 

Virtual  worlds  could  prove  } 
useful  in  corporate  settings 
because  they  offer  a  more 
natural  way  for  employees  to 
communicate  than  telecon¬ 
ferences  or  instant  messag¬ 
ing,  according  to  Jackson. 

—  Heather  Havenstein  ! 


IT  Cuts  to  Cause 
Loss  of  U.K.  Jobs 

LONDON  -  Reductions  in  tech¬ 
nology  spending  could  result 
in  up  to  11,000  jobs  being 
cut  from  the  U.K.’s  financial 
services  industry  over  the  next 
three  months,  according  to  a 
forecast  released  last  week  by 
the  Confederation  of  British 
Industry  (CBI). 

That  prediction  is  based 
on  the  results  of  the  London- 
based  lobbying  group’s  U.K. 
Financial  Services  Survey. 
PricewaterhouseCoopers 
conducted  that  survey  for  the 
CBI,  polling  executives  at  79 
companies  between  Feb.  20 
and  March  5. 

The  survey  found  that  “plans 
for  capital  investment  in  the 


Global , 
Dispatches 


IBM  and  Linden  Research 
Inc.,  the  creator  of 
Second  Life,  last  week 
announced  a  joint  effort 
to  extend  the  virtual  world 
technology  to  improve  col¬ 
laboration  among  corporate 
workers. 

The  companies  said  the 
new  offering  will  mark  the 
first  time  that  a  portion  of 
the  Second  Life  Grid  will 
operate  behind  a  corporate 
firewall.  IBM  and  Linden 
demonstrated  parts  of  the 
grid  running  behind  IBM’s 
firewall  at  the  Virtual 
Worlds  2008  conference  last 
week  in  New  York. 

IBM,  one  of  the  largest 
corporate  users  of  Second 
Life,  said  that  the  new  tech¬ 
nology  will  allow  its  em¬ 
ployees  to  move  between 
its  custom-built,  firewall- 
protected  Second  Life  envi¬ 
ronment  and  the  open  ver¬ 
sion  of  the  virtual  world  with¬ 
out  having  to  log  on  and  off. 

Linden  and  IBM’s  goal  is  to 
enable  other  corporate  work¬ 
ers  to  use  a  single  Second 
Life  client  interface  to  access 
both  public  and  private  spac¬ 
es.  As  part  of  their  agree¬ 
ment,  IBM  and  Linden  plan 
to  join  industry  efforts  to 
ease  communication  among 
users  of  social  networks  run 
by  different  vendors. 

Paul  Jackson,  an  analyst  at 


SAP  AG  promoted  Leo  Apo- 
theker  from  deputy  CEO  to 
co-CEO,  positioning  him  as 
the  likely  successor  to  Hen¬ 
ning  Kagermann,  who  has 
been  running  the  software 
vendor  since  2003. 

extended 
the  availability  of  Windows 
XP  Home  Edition  for  low- 


cost  laptops  but  said  it  will 
stop  selling  other  versions 
on  June  30  as  planned. 


FOUR  YEARS  AGO:  Sun 

Microsystems  Inc.  and 
Microsoft,  then  bitter  rivals, 
settled  an  antitrust  lawsuit 
and  patent  disputes  and 
agreed  to  make  their  prod¬ 
ucts  more  interoperable. 


year  ahead  are  very  weak,  with 
plans  for  spending  on  IT  flat,” 
the  CBI  said  in  a  statement. 

Computerworld  U.K.  stajf 

Shell  Inks  Three 
IT,  Telecom  Deals 


terns,  T-Systems  will  handle 
hosting  and  storage  operations 
for  the  oil  and  gas  company, 
and  EDS  will  be  responsible  for 
end-user  computing  services 
and  integration  services. 
Siobhan  Chapman, 
Computerworld  U.K. 


THE  HAGUE -Royal  Dutch 
Shell  PLC  has  awarded  five- 
year  outsourcing  deals  to 
three  global  IT  and  telecom¬ 
munications  companies.  The 
contracts  are  worth  about 
$4  billion  (U.S.)  collectively. 

Shell,  which  is  based  here, 
said  that  3,000  of  its  IT  work¬ 
ers  will  be  transferred  to  the 
three  outsourcers  -  Frankfurt- 
based  T-Systems  International 
GmbH,  San  Antonio-based 
AT&T  Inc.  and  Plano,  Texas- 
based  Electronic  Data  Systems 
Corp. 

Under  the  agreements,  which 
go  into  effect  on  July  1,  AT&T 
will  manage  Shell’s  network 
and  telecommunications  sys 


BRIEFLY  NOTED 

Dell  Inc.  is  charging  U.K.  con¬ 
sumers  about  8%  more  than  it 
charges  U.S.  consumers  for  a 
new  Inspiron  1525  laptop  with  a 
Blu-ray  drive.  The  laptop’s  price 
tag  is  $879  (£441)  in  the  U.S. 
but  £475  ($950  U.S.)  in  the 
U.K.  Dell  officials  didn’t  com¬ 
ment  on  the  price  difference. 
Carrie-Ann  Skinner, 

PC  Advisor  (U.K.) 
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On  A  Mission. 


Can  you  make  your 
enterprise  more 
secure  by  hiring  250 
million  more  people? 


We  believe  that  no  one  company  can  protect 
the  way  we  all  work  and  live.  So  we  listen  to  a 
worldwide  community  -  250  million  strong  and 
growing  by  100,000  new  users  every  week. 

We  are  Kaspersky  Lab,  the  world’s  largest 
privately  held,  anti-malware  company.  Ours  is 
the  technology  chosen  by  130  of  the  world’s 
leading  enterprise-focused  IT  security  vendors. 
We  are  recognized  by  leading  independent 
test  labs  and  mainstream  IT  press  for  setting 
new  standards  in  IT  Threat  Management. 

It’s  no  wonder  we’re  growing  at  eight  times 
the  industry  rate. 

Join  our  mission.  Call  1.866.328.5700  or  visit 
usa.kaspersky.com/mission  for  a  free  60-day 
trial  of  Kaspersky  Endpoint  Security  and  get 
a  copy  of  the  security  whitepaper, 

“The  Cybercrime  Arms  Race.” 

Kaspersky  Lab  1.866.328.5700  usa.kaspersky.com 


IT  Tries  to  Keep 
Internal  Users 
Under  Control 


Activity-monitoring  tools 
may  be  able  to  help  stop 
rogue  insiders  from  compro¬ 
mising  data.  But  they  aren’t 
being  widely  adopted  yet. 

By  Jaikumar  Vijayan 


WHEN  it  comes 
to  protecting 
his  compa¬ 
ny’s  data, 

Tom  Scocca  doesn’t  mind 
that  he  might  be  seen  as 
something  of  a  Big  Brother 
by  internal  end  users. 

Scocca,  who  is  a  global  se¬ 
curity  consultant  at  a  large 
company  that  supplies  prod¬ 
ucts  to  the  semiconductor 
industry,  thinks  that  threats 
from  within  businesses 
require  as  much  attention 
from  security  managers  as 
external  threats  do. 

So  in  addition  to  the  usual 
network  perimeter  defenses, 
Scocca  has  put  monitoring 
tools  on  end-user  PCs  and 
internal  networks  to  help 
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guard  against  inadvertent  or 
malicious  data  breaches. 

“There  is  a  bit  of  a  Big 
Brother  syndrome  attached 
to  it,”  he  acknowledged.  But 
IT  managers  need  to  get 
over  their  trepidation  about 
being  called  snoops,  added 
Scocca,  who  asked  that  his 
employer  not  be  named. 

“These  tools  are  not  there 
to  spy  on  people,”  he  said. 
Rather,  they’re  designed  to 
“make  sure  the  things  that 
keep  the  revenues  rolling  in 
aren’t  compromised.” 

The  issue  of  rogue  insid¬ 
ers  surfaced  in  a  high-profile 
way  last  month,  when  the 
U.S.  Department  of  State 
disclosed  that  three  contract 
workers  with  access  to  its 
systems  had  improperly 
viewed  the  passport  records 
of  presidential  candidates 
Hillary  Clinton,  John  Mc¬ 
Cain  and  Barack  Obama. 

The  activities  of  the  con¬ 
tractors  were  detected  by  a 
security-monitoring  system 
designed  to  alert  adminis¬ 
trators  whenever  flagged 
passport  files  are  accessed. 

But  technologies  that 
can  keep  a  close  eye  on  the 
activities  of  internal  users 
have  yet  to  be  widely  ad¬ 
opted.  For  example,  Gartner 
Inc.  analyst  John  Pescatore 
estimates  that  less  than  30% 
of  Fortune  5,000  companies 
have  installed  such  tools. 

The  lack  of  active  moni¬ 
toring  of  end  users  is  a  big 
reason  why  some  insiders 
have  been  able  to  pull  off 
spectacular  data  heists  with¬ 
out  getting  caught  —  at  least 
not  right  away. 

A  prime  example  is  the 
case  of  Gary  Min,  a  former 
research  scientist  at  DuPont 
who  in  2005  downloaded 
about  22,000  document 
abstracts  containing  confi¬ 
dential  information  about 
most  of  the  company’s  major 
products.  Min  was  caught 
only  after  he  gave  his  notice; 
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at  that  point,  an  internal 
investigation  showed  that  he 
had  accessed  about  15  times 
more  data  than  the  next- 
highest  user  of  DuPont’s 
electronic  document  library. 

In  another  prominent 
insider  case,  Certegy  Check 
Services  Inc.  disclosed  last 
summer  that  a  database 
administrator  had  sold  the 
personal  and  financial  infor¬ 
mation  of  8.5  million  con¬ 
sumers  to  data  brokers  over  a 
five-year  period.  The  check¬ 
processing  firm  didn’t  nab 
the  DBA  until  a  retailer  re¬ 
ported  a  link  between  check 
transactions  and  marketing 
solicitations  that  some  of  its 
customers  had  received. 

To  try  to  avoid  becoming 
the  next  DuPont  or  Certegy, 
Scocca’s  company  is  using  a 
pair  of  tools  from  Raytheon 
Oakley  Systems  Inc.  One  is 
a  desktop  agent  called  Sure- 
View  that  monitors  all  activ¬ 
ity  on  an  end  user’s  system 
to  make  sure  that  no  data  or 
computer  usage  policies  are 
violated.  If  a  violation  does 
occur,  the  agent  issues  an 
alert  to  the  company’s  secu¬ 
rity  team  and  begins  collect¬ 
ing  data  for  further  review. 

The  tool  features  a  video¬ 
like  playback  feature  that 
lets  security  administrators 
view  precisely  what  a  user 
was  doing  before,  during 
and  after  a  policy  violation 
was  flagged,  Scocca  said. 
That  can  help  the  admins 
determine  almost  instantly 
whether  the  violation  was 
an  accident  or  the  result  of 
deliberate  action,  he  added. 

Complementing  the  desk¬ 
top  agent  is  a  monitoring 
tool  called  CoreView  that 
keeps  an  eye  on  all  internal 
network  traffic  for  sensitive 
or  inappropriate  material. 

Other  vendors  that  sell 
products  designed  to  help 
companies  stop  insider 
threats  include  Symantec 
Corp.,  Vericept  Corp.,  Web- 


Feds  Face  Need 
To  Balance  Data 
Access,  Security 


THE  U.S,  GOVERNMENT’S 
reputation  for  protecting 
data  has  been  hurt  by  a 
parade  of  bad  headlines 
about  spies,  stolen  laptops 
and,  most  recently,  son se 
State  Department  contract 
workers  snooping  into 
Jpassporf  hies. 

But  the  inability  of  intel¬ 
ligence  agencies  to  share 
data  that  might  have 
helped  them  detect  the 
events  that  led  up  to  the 
9/11  terrorist  at  tacks  may 
have  been  the  govern¬ 
ment’s  biggest  information 
failure  ever.  And  balanc¬ 
ing  data  accessibility  and 
security  has  become  a  big 
challenge  for  federal  agen¬ 
cies  in  the  post-9/11  era. 

Improving  data  sharing 
remains  a  work  in  progress 
at  many  agencies.  For 
instance,  the  Department 
of  Defense  wants  to  create 
an  enterprisewide  view  ol 
data  with  the  flexibility  to 
put  information  into  ,:'‘i 
hands  of  an  “unanticipated 
user,”  said  Lloyd  Thrower, 
director  of  strategic  plan¬ 
ning  and  transformation  in 
the  DOD  CIO's  office. 

By  “unanticipated  user,” 
he  means  a  person  or 
,  t  not  originally 
expected  to  need  a  certain 
piece  of  data  -  an  Army 
■  unit  that  wants  to  use  a  l® 


satellite  photo  taken  by 
the  Air  Force,  for  example. 
The  DOD  needs  to  ensure 
that  data  is  tagged  appro¬ 
priately  and  that  user  au¬ 
thorization  criteria  are  at¬ 
tached  to  it.  Thrower  said. 
Credentials  encoded  in  ID 
cards  then  can  determine 
whether  users  are  allowed 
to  access  information. 

Making  data  broadly 
visible  “doesn’t  mean  that 
everybody  is  going  to  get  a 
hold  of  it,”  Thrower  added; 
“It  just  means  that  any¬ 
body  can  determine  that 
there  is  this  type  of  infor¬ 
mation  in  existence.” 

Lucian  Russell,  a  consul¬ 
tant  at  Expert  Reasoning 
&  Decisions  LLC,  said  that 
agencies  are  typically  in¬ 
clined  to  limit  data  access 
in  order  to  “reduce  the  risk 
to  zero.  It’s  sort  of  like  the 
mentality  of  the  Cold  War.” 

But  even  that  may  not  be 
fail-safe.  The  passport- 
files  breach  was  a  case  of 
misplaced  trust  in  work¬ 
ers,  not  a  technology 
failure.  And  take  the  case 
of  that  satellite  photo. 
“How  do  1  make  sure  that 
a  person  requesting  it  isn’t 
being  held  by  gunpoint  out 
in  the  held?”  Russel!  said. 
“These  are  the  kinds  of 
questions  that  come  up” 

-  PATRICK  THIBODEAU 


sense  Inc.,  Tizor  Systems 
Inc.,  Fidelis  Security  Sys¬ 
tems  Inc.,  Tripwire  Inc.  and 
Reconnex  Inc.  Other  ven¬ 
dors,  such  as  Guardium  Inc. 
and  Imperva  Inc.,  offer  tools 
that  monitor  database  activ¬ 
ity  and  check  for  improper 
access  and  other  abuses. 

Tampa  International 
Airport  is  using  system-log 
monitoring  and  analysis  . 


software  from  LogRhythm 
Inc.  as  part  of  its  effort  to 
comply  with  Florida’s  data 
retention  laws  and  the  Pay¬ 
ment  Card  Industry  Data 
Security  Standard.  And 
because  the  software  can 
quickly  correlate  log  events 
from  practically  every  IT 
system,  it  also  serves  as 
both  a  real-time  alerting 
system  and  an  after-the-fact 


forensic  tool,  said  Katherine 
Muffin,  the  airport’s  IT  sys¬ 
tems  security  manager. 

Pasadena  Federal  Credit 
Union  has  set  up  a  log  man¬ 
agement  product  from  Tri- 
Geo  Network  Security  Inc. 
to  take  actions  such  as  quar¬ 
antining  a  computer  when  it 
detects  a  policy  violation. 
Mike  McDannel,  the  Pasa¬ 
dena,  Calif.-based  credit 
union’s  IT  security  man¬ 
ager,  said  his  team  is  also 
using  a  companion  tool  that 
can  send  alerts  when  users 
insert  unapproved  USB  de¬ 
vices  into  their  computers. 

Gartner’s  Pescatore  said 
he  expects  the  adoption 
of  user-monitoring  tools 
to  pick  up,  largely  because 
of  regulatory  compliance 
needs.  But  such  technolo¬ 
gies  have  their  limits.  For 
one  thing,  tools  that  are 
designed  to  restrict  user 
actions,  such  as  download¬ 
ing  data  onto  USB  drives, 
may  require  far  too  many 
built-in  rules  in  order  to  dis¬ 
tinguish  between  legitimate 
and  illegitimate  activities. 
“It’s  hard  to  describe  autho¬ 
rized  to  a  computer,”  Pesca¬ 
tore  said. 

And  if  tools  are  set  up  to 
generate  real-time  alerts 
about  data  leaks,  there’s 
a  danger  of  being  over¬ 
whelmed  by  false  positives 
if  the  rules  aren’t  set  prop¬ 
erly.  That’s  particularly 
true,  Pescatore  said,  when 
monitoring  software  is  used 
to  track  data  that  may  not  be 
well  defined,  such  as  intel¬ 
lectual  property. 

Prat  Moghe,  chief  technol¬ 
ogy  officer  at  Tizor,  which 
sells  data-auditing  software, 
acknowledged  that  many  of 
the  tools  available  for  protect¬ 
ing  data  from  inside  threats 
remain  unfamiliar  to  most 
IT  managers.  “These  are 
still  early  days  for  this  indus¬ 
try,”  Moghe  said.  “There’s  a 
lot  of  confusion.”  ■ 
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■  HARDWARE 


IBM  Follows  Path 
Of  Unification  on 
Midrange  Systems 

The  vendor  is  merging  its  System  i  and  p 
servers  into  one  product  line.  But  users  nave 
nothing  to  fear,  it  says.  By  Patrick  Thibodeau 


First  there  was 
the  AS/400,  then 
the  iSeries  and 
eventually  the 
System  i  —  dif¬ 
ferent  names,  but  all  for  the 
same  midrange  computer 
line  that  IBM  has  been  sell¬ 
ing  since  1988. 

Now  there’s  just  an  oper¬ 
ating  system  —  with  the  un¬ 
likely  name  of  IBM  i  —  and 
it  will  become  part  of  a  new 
server  line  that  also  sup¬ 
ports  Unix  and  Linux. 

In  effect,  IBM  is  unifying 
its  System  i  and  System  p 
servers.  The  company  has 
been  on  that  path  for  years, 
but  it  didn’t  confirm  its 
plans  until  last  week,  when 
it  announced  its  new  Power 
Systems  family  of  products. 

The  customers  most 
affected  by  the  change  are 
System  i  users,  many  of 
whom  still  run  their  core 
business  applications  —  of¬ 
ten  custom-built  —  on  the 
venerable  midrange  plat¬ 
form.  IBM  said  those  users 
have  nothing  to  fear  because 
it  remains  fully  committed  to 
System  i  s  operating  system, 
which  includes  a  built-in 
database,  security  and  ad¬ 
ministration  tools,  as  well  as 
other  integrated  features. 

The  highly  integrated  na¬ 
ture  of  System  i  has  helped 


cement  the  loyalty  of  its 
users,  and  their  dedication 
to  the  machines  explains 
why  IBM  decided  to  an¬ 
nounce  the  unification  plan 
at  the  annual  conference  of 
the  Common  user  group  in 
Nashville  last  week. 

IBM  tried  to  reassure 
System  i  users  that  they  will 
be  able  to  move  to  the  new 
hardware  seamlessly.  Mak¬ 
ing  the  change  “will  not  be 
at  all  disruptive,”  vowed 
Mark  Shearer,  vice  president 
of  marketing  for  IBM’s  busi¬ 


ness  systems.  He  added  that 
the  current  release  of  the 
midrange  operating  system 
—  formerly  called  15/OS, 
now  IBM  i  —  will  run  on 
Power  Systems  servers. 

In  recent  years,  some 
System  i  users  have  voiced 
concerns  about  IBM’s  long¬ 
term  support  for  the  mid¬ 
range  line  and  questioned 
whether  it  was  spending 
enough  money  on  marketing 
and  developing  new  support 
among  application  vendors. 

But  Randy  Dufault,  Com¬ 
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mon’s  president,  said  the 
unified  hardware  may  make 
it  easier  for  users  to  make  a 
business  case  for  continuing 
to  run  IBM  i.  If  they  also  use 
System  p  machines,  their 
companies  will  now  have 
only  one  hardware  platform 
to  support,  said  Dufault, 
who  is  also  a  consultant  at 
MBS  Technologies  Inc.,  a 
Minneapolis-based  software 
vendor  and  consulting  firm. 

“IBM  is  showing  a  com¬ 
plete  and  total  future  com¬ 
mitment  to  our  members,” 
Dufault  said.  He  added  that 
even  with  System  i  going 
away  as  a  separate  hardware 
line,  an  application  devel¬ 
oped  for  it  decades  ago  will 
continue  to  operate  on  the 
Power  Systems  machines. 

IBM’s  plan  does  have  some 
potential  pitfalls,  though.  Joe 
Clabby,  an  analyst  at  Clabby 
Analytics,  said  he  thinks  the 
continued  market  success 
of  IBM  i  will  depend  on  the 
company’s  ability  to  entice 
application  developers  to 
support  the  operating  sys¬ 
tem.  As  long  as  the  vendor 
can  do  that,  IBM  i  has  a 
strong  future,  Clabby  said. 

For  IBM  itself,  the  de¬ 
cision  to  unify  the  two 
hardware  lines  means  that 
it  doesn’t  have  to  invest 
research  and  development 
dollars  in  separate  platforms 
and  can  instead  focus  more 
on  its  operating  systems  and 
applications.  “This  elimi¬ 
nates  an  expense  for  them,” 
Clabby  said. 

Power  Systems  hardware, 
which  supports  IBM  i  as 
well  as  Red  Hat  Linux,  SUSE 
Linux  and  IBM’s  AIX  vari¬ 
ant  of  Unix,  is  scheduled  to 
start  shipping  on  April  18. 
Dufault  said  he  thinks  the 
overall  cost  of  running  an 
IBM  i  server  will  still  be  less 
than  the  cost  of  using  Linux 
because  of  the  high  level  of 
integration  within  the  mid¬ 
range  operating  system.  ■ 
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I  Turn  PCs  Into  Antennas 
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HOMAS  AISENBRAY  thinks  the  enclosures  around  your 
PCs  and  laptops  can  do  more  than  contain  their  digital  in¬ 
nards.  They  can  also  transmit  signals.  As  the  chief  technol¬ 
ogy  officer  at  Bellingham,  Wash-based  Integral  Technolo¬ 
gies  Inc.,  Aisenbray  is  the  primary  driver  behind  a  patented 
process  that  he  claims  turns  a  special  polymer  matrix  he  calls  Electri- 
plast  into  a  superconductor  ideal  for  wireless  communications.  With  it, 


he  says,  comput¬ 
er  makers  could 
eliminate  copper- 
and  silicon-based 
communications 
chip  sets,  saving 
costs  and  freeing 
up  real  estate  on 
the  motherboard.  And  start-up  costs 
should  be  minimal,  he  contends, 
since  the  flexible  Electriplast  would 
fit  easily  into  manufacturers’  current 
production  molds. 

Aisenbray  says  his  company  is 
building  prototypes  and  has  inked  a 
production  deal  with  fasper  Rubber 
Products  Inc.  in  fasper,  Ind.  The  U.S. 
military  will  receive  the  first  ship¬ 
ments  later  this  year,  but  Aisenbray 
isn’t  sure  about  commercial  avail¬ 
ability. 


Find  That  Wi-Fi 
Interference 

If  your  2.4-GHz  Wi-Fi  networks  have 
pesky  interference  problems,  take 
a  gander  at  the  new  Chanalyzer  3.0 
software  from  MetaGeek  LLC  in 
Nampa,  Idaho.  The  new  version  of 
the  Windows  software,  paired  with 
the  company’s  Wi-Spy  2.4x  USB- 
based  antenna,  can  locate  competing 


1984 

The  year  Los  Alamos 
National  Labs  showed 
that  plastic  is  equivalent 
to  metal  as  a  conductor 
of  electricity. 


The  Wi-Spy  antenna  and  Chanalyzer  3.0 
software  include  new  features  to  detect 
more  wireless  network  problems. 


signals.  According  to  Ryan  Wood- 
ings,  chief  geek,  the  upgrade’s  In¬ 
spector  feature  adds  flexible  views  of  I 
spectral  amplitude  over  time.  That 
way,  you  can  record  interference  even 
during  off  hours  so  problems  can  be 
diagnosed  even  if  you’re  not  snoop¬ 
ing  the  spectrum  at  the  moment  they 
occur.  A  new  feature  lets  you  quickly  * 
compare  the  signatures  you  capture 
with,  say,  those  of  a  microwave  oven 
or  a  cordless  phone.  MetaGeek  has 
an  online  database  of  various  wire¬ 
less  devices’  sigs  that  can  be  used 
for  quick  diagnosis.  In  late  summer, 
Woodings  says,  the  company  will 
ship  a  5.4-GHz  Wi-Spy  antenna  to 

_  g 

capture  signals  in  that  band.  The 
Chanalyzer  3.0  and  Wi-Spy  2.4x 
software-hardware  combo  costs  $399.  J 


45M 


Investment  bank 
Piper  Jaffray's 
estimate  of 
iPhones  to  be 
sold  in  2009. 


Cheap  Talk  Goes  Global 

Voice  communication  keeps  getting 
cheaper,  thanks  to  voice-over-IP 
technology.  How  does  2  cents  per 
minute  sound  for  international  dial¬ 
ing?  Almost  makes  it  worth  traveling 
overseas  to  make  friends  just  so  you 
can  call  them  later. 

That  low-cost  plan,  MyGlobalTalk 
from  i2Telecom  International  Inc. 
in  Roswell,  Ga.,  is  now  in  beta.  CEO 
Paul  Arena  says  the 
beta  is  restricted  to 
users  of  Windows 
Mobile  5.0  (and  later) 
smart  phones,  but 
in  the  full  rollout  in 
mid-May,  the  com¬ 
pany  will  deliver 
the  same  bargain-basement  service 
to  BlackBerry,  iPhone  and  Symbian 
users.  Even  sweeter,  there  are  no 
sign-up  fees,  he  says.  You  merely 
download  an  SMS-based  app  to  your 
handset  and  begin  to  babble  away. 

Arena  acknowledges  that  to  make 
megabucks  at  2  cents  per  minute, 
he’ll  need  millions  of  customers  af¬ 
flicted  with  logorrhea.  But  another 
path  to  riches  might  be  for-pay  ser¬ 
vices,  such  as  unified  messaging.  He 
sees  Apple’s  new  software  develop¬ 
ment  kit  for  the  iPhone  as  . 

an  excellent  way  to  build 
low-cost  apps  that  appeal 
to  business  users.  Ring  up 
i2Telecom  with  your  app 
ideas.  It  might  be  the  last 
pricey  call  you  make.  ® 
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0  MORE  BUZZ 

Discover  and  discuss 
more  industry  action  at 
the  On  the  Mark  blog: 

computerworid.com/ 

blogs/hail 
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m  THE  GRILL 

Jonathan  L.  Zittrain 

The  Internet  champion  talks 
about  ‘generality’  vs.  lockdown, 
nefarious  filtering  and  social 

solutions  to  security  issues. 
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Name:  Jonathan  L.  Zittrain 

Title:  Holds  the  chair  in  Inter¬ 
net  governance  and  regulation 
at  Oxford  University;  a  princi¬ 
pal  of  the  Oxford  Internet  Insti¬ 
tute;  the  Jack  N.  and  Lillian  R. 
Berkman  visiting  professor  for 
entrepreneurial  legal  studies 
at  Harvard  Law  School;  co¬ 
founder  of  Harvard’s  Berkman 
Center  for  Internet  &  Society 


Favorite  technology:  The  Sling- 
box.  “It  works  beautifully  for 
trans-Atlantic  television.” 

I  - - - 

Technology  pet  peeves:  “Black- 
|  Berries  and,  in  the  U.K.,  all-in- 
one  washer-dryers  that  don’t 
really  dry.” 

Ambitions:  Supreme  Court 
justice  or  surgeon  general 

;  Epitaph  of  choice:  “Fatal  er¬ 
ror:  [AJbort,  [Rjetry,  [F]ail?” 


I 

S 

i 

!  Jonathan  L.  Zittrain  is  co-director  of 
I  StopBadware.org,  a  “neighborhood 
|  watch”  campaign  aimed  at  fighting  ma- 
|  licious  software.  He  is  also  a  principal 
I  investigator  of  the  OpenNet  Initiative,  a 
!  multiuniversity  effort  to  investigate,  ex- 
i  pose  and  analyze  Internet  filtering  and 
j  surveillance  practices.  Zittrain  is  co- 
j  author  of  Access  Denied:  The  Practice 
|  and  Policy  of  Global  Internet  Filtering 
'  (MIT  Press,  2008)  and  author  of  the 
i  just-published  book,  The  Future  of  the 
«  Internet  and  How  to  Stop  It  (Yale  Uni- 
|  versity  Press,  2008). 

I 

1  What  is  “generativity”  in  IT,  and  why  is  it 
I  at  risk?  It’s  the  ability  to  use  a  platform 
j  to  build  new  things  and  share  them 
J  without  the  permission  or  intervention 
‘  of  the  maker  of  the  platform.  Many 
1  of  the  things  we  now  see  as  central  to 
!  the  Internet  revolution  came  about  be- 


i 

;  cause  some  geeky  kids  did  something 
J  whimsical,  and  then  it  turned  out  to 

*  be  central.  A  generative  system  allows 

\  many  ideas  to  be  tried  with  low  invest- 

•  ment  and  low  risk. 


But  the  qualities  that  make  genera- 
!  tive  systems  good  make  them  suscep- 
;  tible  to  abuse  when  they  become  suc- 
!  cessful.  Then,  the  natural  reaction  of 
‘  many  people  is  to  retreat.  So  there  is  a 
'  Continued  on  page  20 
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Take  the  heat  off  of  your  increasing  power  and  cooling  costs  with  the  HP  BladeSystem  c3000.  In  addition  to  ProLiant  Server  Blades, 
you  can  add  a  variety  of  StorageWorks  Storage  Blades  for  a  complete  solution.  The  c3000  works  almost  anywhere  by  simply  plugging 
directly  into  a  standard  power  outlet— with  no  additional  cooling  requirements. 

Technology  that  helps  you  avoid  risk  while  helping  to  reduce  costs.  How  cool  is  that? 


Technology  for  better  business  outcomes. 


Featuring  efficient 

Quad-Core  AMD  Opteron™  processors. 


AMDit 

Opteron 


To  learn  more,  call  1 -888-277-961 8  or  visit  hp.com/go/success66 

AMD,  the  AMD  Arrow  logo,  AMD  Opteron,  and  combinations  thereof,  are  trademarks  of  Advanced  Micro  Devices,  Inc.  The  information  contained  herein  is  subject  to  change  without  notice. 
©  2008  Hewlett-Packard  Development  Company,  L.P. 
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MWe  are 

approaching 
the  worst 
of  both  worlds  with 
many  ISPs. 


Continued  from  page  18 
migration  to  “locked  down”  informa¬ 
tion  appliances,  like  the  iPod,  that  are 
not  programmable  by  third  parties. 
And  you  are  increasingly  seeing  the 
PC  itself  locked  down  in  places  like 
offices  and  schools. 

Isn’t  there  a  place  for  generative  systems 
and  iocked-down  appliances?  I  like  the 
idea  of  a  diverse  ecosystem.  I  am  not 
against  the  information  appliance  that 
distills  the  best  things  that  the  genera¬ 
tive  environment  produces.  I  like  my 
TiVo.  But  Pm  nervous  that  if  we  lose 


the  generative  core,  we  will  be  back  to 
a  situation  where  innovation  is  medi¬ 
ated  through  a  small  number  of  firms. 

Won’t  there  always  be  plenty  of  bright 
kids  developing  new  generative  things? 

Young  nerds  today  are  not  program¬ 
ming  for  Windows  or  the  Mac  or  much 
for  Linux.  They  are  programming  for 
Facebook,  Google  mashups  and  so  on. 

I  see  a  migration  of  energy  to  these. 

I  call  these  platforms  “contingently 
generative.”  They  are  open  to  third 
parties,  but  if  someone  complains  that 
it  hurts  them,  they  can  go  to  Facebook, 
and  it  shuts  them  down.  And  Face- 
book  even  reserves  the  right  to  start 
charging  retroactively  for  successful 
applications.  You  don’t  have  to  sue  the 
nerds  to  enforce  it;  you  just  cut  their 
application  off.  Can  you  imagine  Bill 
Gates  saying,  “Oh,  by  the  way,  you  owe 
me  for  that  application  you  have  been 
running  on  Windows?” 

You  say  Wikipedia  has  somehow  escaped 
abuse  while  remaining  generative.  Can  its 
concepts  be  broadly  applied?  Yes.  Wiki¬ 
pedia  really  is  an  unlikely  success. 

The  success  is,  you  start  off  small  and 
you  don’t  worry  about  vandalism  and 
abuse  until  it  starts  happening.  So  with 
Wikipedia,  we  see  an  initial  round  of 
success  followed  by  a  bit  of  a  backlash. 
So  it  had  to  adopt  a  new  strategy  to 
deal  with  vandalism.  One  concept  we 
could  apply  elsewhere  is  not  thinking 
that  a  bad  thing  is  proof  that  a  system 
is  wrong.  Yes,  Wikipedia  can  be  van¬ 
dalized;  the  question  is,  how  quickly 
and  easily  can  it  be  reverted  [to  its  cor¬ 
rect  state]?  The  software  is  designed 
to  make  that  very  easy,  as  long  as  the 
number  of  people  correcting  outnum¬ 
bers  the  people  ruining.  That  makes  it 
a  sort  of  democratic  technology. 

So  Wikipedia  moves  the  problem  up  from 
the  software  layer  into  the  user  layer? 

Exactly.  Wikipedia  has  realized  that 
this  type  of  damage  is  a  social  problem 
that  calls  for  social  solutions.  It  polices 
itself  according  to  an  ethical  code 
that  encourages  users  to  do  the  right 
thing  rather  than  the  required  thing.  I 
would  like  to  see  other  ways  for  people 
to  share  their  experiences  with  other 
people  on  the  Net  so  they  can  help 
each  other. 


That  sounds  like  your  “Herdict,”  or  “ver¬ 
dict  from  the  herd,”  project.  That’s  a 
project  of  Harvard  and  Oxford  univer¬ 
sities  to  develop  new  code,  download¬ 
able  by  people  at  large,  that  relays  the 
basic  vital  signs  of  their  PCs  to  others 
also  running  the  code.  You’ll  be  able 
to  see  how  your  PC  compares  to  oth¬ 
ers  like  it.  It  might  tell  you  your  PC  is 
crashing  a  lot  more  than  other  PCs  that 
have  roughly  the  same  configuration 
[or  that]  you  are  running  some  [poten¬ 
tially  malicious]  code  that  others  are 
not  running. 

Would  the  herd,  then,  via  Herdict,  advise 
you  what  to  do  about  your  problem? 

That’s  the  community  part  of  Stop- 
Badware.org  that  we  want  to  have 
developed.  That’s  where  we  will  rely 
on  people  in  the  community  joining  up 
and  getting  obsessed  about  this.  It’s  the 
social  layer  that  sits  on  top. 

What  else  could  go  on  at  the  social 
layer?  We  are  developing  a  [social 
and  technical  system]  for  Internet  fil¬ 
tering.  As  you  surf,  if  you  encounter  a 
site  you  can’t  get  to,  you  click  on  a  but¬ 
ton  that  says  you  can’t  get  there  from 
here,  [and]  we  can  start  to  aggregate 
[these  responses].  So  maybe  everyone 
in  China  says  they  can’t  get  to  this 
site,  but  nobody  else  is  having  a  prob¬ 
lem.  Ultimately,  the  hope  is  to  have 
not  only  a  real-time  map  of  filtering  in 
China,  but  to  have  it  refined  enough 
that  we  can  find  network  neutrality 
violations. 

We  are  working  on  that  now,  as  part 
of  the  OpenNet  Initiative.  We  have 
spent  several  million  dollars  over  sev¬ 
eral  years  on  a  study,  out  this  month, 
on  filtering  in  50  [countries]  around 
the  world. 

How  could  ISPs  help?  We  are  approach¬ 
ing  the  worst  of  both  worlds  with 
many  ISPs.  They  are  inching  toward 
all  sorts  of  violations  of  network  neu¬ 
trality.  And  yet  when  a  machine  on  the 
network  is  compromised  and  starts 
sending  out  tons  of  spam,  it’s  very  rare 
you  get  action  from  the  ISP,  which 
could  quarantine  the  machine.  The  ISP 
would  rather  collect  the  monthly  fee 
for  the  machine,  and  who  cares  what 
it’s  doing? 

—  Interview  by  Gary  Anthes 
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ALTERNATIVE  THINKING  ABOUT  ASSURANCE: 


There  is  a  certain  amount  of  confidence  that  comes  with  the  HP  ProLiant  DL385  G5  Server,  featuring  efficient  Quad-Core  AMD  Opteron™ 
processors.  Not  just  because  it  is  the  best-selling  server  of  its  kind.*  But  with  time-tested  features  like  Pre-Failure  Notification  and  Remote 
Access  Management,  it  unfailingly  delivers  on  the  promise  of  never  letting  I.T.  down. 


Technology  for  better  business  outcomes. 


:  : 


Lease  for  as  low  as 
Smart  (PN:  464211-005) 

•  2  Quad-Core  AMD  Opteron™  processors 

•  Supports  small  form  factor,  high-performance 
SAS  or  low-cost  SATA  hard  drives 

•  Redundant  Power 

•  Integrated  Lights-Out  (iL02),  Systems 
Insight  Manager,  SmartStart 

Get  More: 

Smart  24x7,  4  hour  response,  3  years 

(PN:  UE894E)  $689 

Smart  Add  2  GB  additional  memory 

(PN:  408851-S21)  $159 


HP  StorageWorks  Ultrium 
'  18  Tape  Drive  SAS  Bundle 

1649 


Lease  for  as  low  as  $41  /mo'  for  48  months 
Smart  (PN:  AG739A) 

•  400  GB  compressed  capacity  in  half-height 
form  factor 

•  Ships  with  Data  Protector  Express  Software, 
One  Button  Disaster  Recovery,  a  1U 
Rackmount  Kit,  and  a  Host  Bus  Adapter 


10,000,000  I.T.  folks  can't  be  wrong. 

To  learn  more,  call  1-888-220-7138  or  visit  hp.com/go/dependable6 


‘Based  on  IDC,  Worldwide  Quarterly  Server  Tracker,  February  2008.  In  calendar  4Q07,  IOC  reported  worldwide  HP  ProLiant  server  shipments  at  681,445  units,  well  ahead  of  Dell  PowerEdge’s 
499,715  units  at  #2.  IDC  also  reported  ProLiant  factory  revenue  at  $2,743  million  vs.  $1 ,580  million  for  Dell's  PowerEdge  family.  Prices  shown  are  HP  Direct  prices;  reseller  and  retail  prices  may 
vary.  Prices  shown  are  subject  to  change  and  do  not  include  applicable  state  and  local  taxes  or  shipping  to  recipient’s  address.  Offers  cannot  be  combined  with  any  other  offer  or  discount  and  arc- 
good  while  supplies  last.  All  featured  offers  available  in  U.S.  only.  Savings  based  on  HP  published  list  price  of  configure-to-order  equivalent  ($3945  -  $1420  instant  savings  -  SrnartBuy  phce  of 
$2,525).  1.  Financing  available  through  Hewlett-Packard  Financial  Services  Company  (HPFS)  to  qualified  commercial  customers  in  the  U.S.  and  subject  to  credit  approval  and  execution  of  standard 
HPFS  documentation.  Prices  shown  are  based  on  a  lease  of  48  months  in  terms  with  a  fair  market  value  purchase  option  at  the  end  of  the  term.  Rates  based  on  an  original  transaction  size  between 
$3,000  and  $25,000.  Other  rates  apply  for  other  terms  and  transaction  sizes.  Financing  available  on  transactions  greater  than  $349  through  July  31 , 2008.  HPFS  reserves  the  right  to  change  or 
cancel  these  programs  at  any  time  without  notice.  AMD,  the  AMD  Arrow  logo,  AMD  Opteron,  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©  2008  Hewlett- Packard 
Development  Company,  L.P.  The  information  contained  herein  is  subject  to  change  without  notice. 


■  OPINION 

Thornton  A.  May 

The  Good-News 
Recession  and  IT 

THE  U.S.  macroeconomy  is  slowing  down.  You  and 
I  know  this,  though  economists  and  politicians  are 
still  on  the  wrong  side  of  the  decimal  point,  debat¬ 
ing  the  exact  starting  date  of  the  recession. 
Unwilling  to  wait  for  the  result  of  that  bloviating,  the  IT 
Leadership  Academy  convened  a  group  of  IT  elders  who  have 


survived  previous  eco¬ 
nomic  slowdowns,  and 
a  second  group  made 
up  of  extremely  bright 
MBA  students  at  Ohio 
State  University.  We 
asked  them  to  discuss 
two  questions:  “Does  a 
slowing  macroeconomic 
environment  mandate 
IT  spending  cuts?”  and 
“What  lessons  do  experi¬ 
ence  and  the  business 
canon  offer  IT  leaders  in 
these  turbulent  times?” 

First,  we  hunted  down 
some  facts: 

The  U.S.  is  no!  the  only 
economic  game  going 
on:  Emerging  countries 
account  for  half  of  the 
world’s  economy,  and 
many  of  their  economies 
are  experiencing  growth 
rates  of  6%  to  7%.  So  a 
severe  slowdown  in  the 
most  developed  coun¬ 
tries  would  still  leave 
the  world  with  an  annual 
growth  rate  of  around 


4%,  according  to  the 
World  Economic  Forum. 

The  U.S.  economy  is  not 
homogeneous:  There  are 
pockets  of  prosperity 
across  the  country.  For 
example,  farmers  are  en¬ 
joying  record  crop  prices, 
thanks  to  the  surge  in  de¬ 
mand  for  ethanol.  Retir¬ 
ees  with  good  portfolios, 
who  constitute  a  growing 
percentage  of  the  total 
population,  will  continue 
to  have  interest  and  in¬ 
vestment  income  to  spend 
no  matter  what  happens. 
The  high  end  of  the  indul¬ 
gences  market  —  services 
such  as  spas,  cigar  bars 
and  children’s  clothing 
boutiques  —  continue  to 
show  sales  growth. 

There  are  bright  spots: 

■  The  challenge 
the  economy 
poses  is  not  to  do 
anything  foolish. 


The  weak  dollar  is  help¬ 
ing  exporters  and  retail¬ 
ers  that  cater  to  foreign 
tourists.  Unemployment 
remains  low  at  4.8%. 
Outside  of  Wall  Street, 
corporate  balance  sheets 
remain  remarkably 
strong.  The  Fed  appears 
to  have  mastered  the 
“three  T’s”  of  economic 
stimulus  —  measures  that 
are  timely,  targeted  and 
temporary  to  improve 
our  nation’s  long-run  eco¬ 
nomic  performance,  ac¬ 
cording  to  The  Brookings 
Institution’s  Metropolitan 
Policy  Program. 

Given  these  facts,  both 
the  seasoned  executives 
and  the  promising  stu¬ 
dents  concluded  that  the 
challenge  is  not  to  do 
anything  foolish. 

Historically,  conven¬ 
tional  thinking  about 
how  to  respond  to  a 
recession  was  to  reduce 
spending,  hunker  down 


and  wait  for  good  times  J 
to  return.  This  is  no  lon¬ 
ger  good  advice.  In  fact, 
such  behavior  would  be 
foolish.  Well-managed 
companies  and  IT  shops  | 
should  look  at  the  reces¬ 
sion  as  an  opportunity. 

IT  has  always  been  a 
master  of  doing  more 
with  less.  A  slowing 
macroeconomic  environ-  ! 
ment  is,  believe  it  or  not, 
a  great  time  to  be  in  IT  —  J 
for  virtualization  and 
data  center  consolida¬ 
tion,  and  for  customer 
segmentation  and  busi¬ 
ness  intelligence  projects,  j 
Hard  times  also  bring  out  I 
the  best  in  vendors  that 
had  previously  focused 
on  selling  whatever  they 
had  in  the  truck.  They 
become  more  solicitous, 

l 

more  willing  to  listen  and  \ 
more  accommodating. 

Strategically  astute 
companies  know  that  an  j 
economic  dip  is  the  best 

l 

time  to  make  innovative 
IT  investments  that  can 
create  differentiation.  If 

I 

those  investments  are  de-  j 
ployed  when  competitors  I 
are  retrenching,  they  can 
grow  the  bottom  line. 

So  stop  waiting  for  the 
politicians  and  econo¬ 
mists  to  make  up  their 
minds.  It’s  time  to  get 
busy!  ■ 

Thornton  A.  May  is  a  long¬ 
time  industry  observer, 
management  consultant 
and  commentator.  You 
can  contact  him  at 
thorntonamay@aol.com. 
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ALTERNATIVE  THINKING  ABOUT  STORAGE: 


Self-optimizing  storage  is  more  powerful  and  cost-effective.  So  the  new 
HP  StorageWorks  4400  Enterprise  Virtual  Array  unifies  viewing  and  access 
of  up  to  96TB  of  storage  through  data  pooling  and  automatic  capacity 
allocation,  to  dramatically  simplify  managing  storage.  Bringing  storage 
together  saves  times  and  money.  Technology  for  better  business  outcomes. 


Up  to  96TB  virtual  storage  capacity. 

•  Enterprise-class  performance 

•  Over  30%  better  capacity  utilization* 

•  Up  to  75%  less  time  needed  to 
configure  and  manage* 

•  Easy  application  integration 


©2008  Hewlett-Packard  Development  Company,  L.P.  The  information  contained  herein  is  subject  to  change  without  notice.  ^Source:  Edison  Group. 
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New  IT  titles  portend  a  revolution  in  IT  roles.  By  Mia  Ming 


Think  agai  M  ha  ■  i  might 

realty  want  to  be  is  a  chief  delivery  officer  or  chief  process  officer. 


Software  developers  eager  to  advance 
%  should  consider  looking  for  product  architect 
roles.  Network  and  security  administrators 
may  want  to  start  looking  for  positions  as  elec¬ 
tronic  privacy  specialists.  If  business  analytics 
is  your  area  of  expertise,  your  next  promotion 
might  be  to  the  job  of  information  architect. 

And  one  more  thing:  Don’t  expect  to  be  part 
of  an  IT  department.  As  a  21st  century  technol¬ 
ogy  professional,  your  future  —  and  most  likely 
your  desk  —  will  be  on  the  business  side,  and 
your  title  will  likely  be  scrubbed  of  any  hint  of 
computers,  databases,  software  or  data  networks. 

“We’ll  see  new  and  made-up  titles  come  about,” 


predicts  David  McCue,  CIO  at  Computer  Sciences  Corp. 
(CSC),  a  global  consulting,  systems  integration  and  out¬ 
sourcing  company.  “I’ve  already  seen  new  cards  and  new 
titles  like  guru  of  X,  advocate  for  Y  and  ombudsman  of  Z” 
he  says.  “To  me,  that  signals  the  beginning  step  in  a  matu¬ 
rity  cycle.  It  doesn’t  feel  right  to  call  [a  changing  role]  the 
same  thing,  so  you  make  something  up.” 

CSC  is  also  changing  where  and  how  it  places  some  of  its 
IT  professionals  within  companies.  “The  traditional  IT  de¬ 
partment  is  beginning  to  morph  into  a  series  of  individuals 
who  are  comfortable  using  technology  and  who  know  its 
inherent  characteristics,”  McCue  says.  “They  are  becom¬ 
ing  embedded  into  the  businesses  as  technology  mentors. 
These  are  the  people  on  the  business  development  team 
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titles  with 
more  of  a  focus  on 
information  -  simi¬ 
lar  to  library  titles. 
Titles  about  tag¬ 
ging  and  catalog¬ 
ing  information. 


tain  tradi¬ 
tional  network- 
analyst  and  stor¬ 
age  and  server 
managers. 

But  where  titles 
are  going  is  toward 
solutions,  process 
and  analytics,  and 
combining  an  in¬ 
novation  and  an 
R&D  mentality. 

You’ll  start  to  see 


value  delivery  and 
accountability. 
Examples  are 
‘delivery  manager’ 
and  ‘chief  delivery 

—  ■  -XU _ 


who  create  a  pretty  or  sticky  Web  site.” 

Jonathan  Thatcher,  director  of  business 
integration  at  the  Chicago-based  Computing 
Technology  Industry  Association  (Comp- 
TIA),  says  he  has  already  begun  to  see 
changes  in  IT  titles  that  downplay  technolo¬ 
gies  and  focus  on  business  attributes.  “Wire¬ 
less  technicians,  for  example,  are  turning 
into  mobility  support  staff,  and  tech  support 
is  called  high-availability  support,”  he  notes. 

I  BACKGROUND  ROLE 

Key  factors  driving  this  evolution  include 
the  commoditization  of  technology  and  a 
growing  base  of  new  workers  who  are  tech¬ 
nologically  savvy  and  accustomed  to  having 
technology  play  a  background  role  in  just 
about  everything  they  do. 

These  workers  and  the  industries  they’re 
in  have  less  of  a  need  for  computer  program¬ 
mers  and  help  desk  analysts,  either  because 
they  know  how  to  program  themselves  or 
the  help  they  need  is  built  right  into  the  soft¬ 
ware  they’re  using  to  do  their  jobs. 

“IT  is  no  longer  a  subset  specialty.  IT  is  in¬ 
tegrated  into  whatever  work  you’re  trying  to 
get  done,”  says  Patti  Dodgen,  vice  president 
at  Mosaica  Partners  LLC,  an  IT  consultancy 
specializing  in  the  health  care  industry.  In 
health  care,  for  example,  “there  is  a  huge 


drive  to  fill  positions  with  someone  who 
has  a  foot  in  both  the  medical  world  and  the 
technology  world,”  Dodgen  says. 

No  one  knows  exactly  what  to  call  these 
positions,  she  says,  but  they  definitely  in¬ 
clude  more  than  pure  technical  skills.  “If  you 
have  been  a  heads-down  programmer,  you’re 
at  a  terrible  disadvantage”  in  trying  to  secure 
one  of  these  new  roles,  says  Dodgen.  “But  if 
you’ve  been  on  an  application  development 
team  and  worked  with  a  business  partner  to 
facilitate  their  goals,  you  have  a  big  leg  up.” 

“The  IT  department  is  being  disinterme¬ 
diated,  but  in  a  good  way.  It  is  being  pushed 
farther  up  the  food  chain,”  says  Kamud 
Kalia,  CIO  at  Direct  Energy,  an  $8  billion 
integrated  energy  services  company.  “A  lot 
of  stufflT  would  have  done,  they  no  longer 
need  to  do.  The  problems  have  been  fixed  or 
the  technology  has  been  commoditized.” 

Ten  years  ago,  for  example,  “you’d  put 
smart  guys  on  the  project  of  joining  applica¬ 
tions  together,”  Kalia  says.  “Now,  middle¬ 
ware  has  obviated  the  need  for  that.  You 
want  smart  people  solving  business  prob¬ 
lems,  not  technical  ones.” 

Other  companies,  such  as  Animas  Corp.,  a 
Johnson  &  Johnson  unit,  are  eliminating  tra¬ 
ditional  IT  roles  and  titles,  such  as  systems 

Continued  on  page  28 


■  w  ul  uuiil,  uigi caic  dim 

plenty  of  traditional  IT  titles 
and  jobs  to  be  had  across  all 
industries.  Virtually  all  of  the 
CIOs,  analysts,  IT  job  experts 
and  career  advisers  inter¬ 
viewed  for  this  story  acknowl¬ 
edge  that  IT  is  at  the  very 
beginning  of  this  trend. 

“What  we’re  describing  is 
still  very  aspirational,”  says 
Vinnie  Mirchandani,  founder  of 
Deal  Architect  Inc.  and  a  for¬ 
mer  technology  industry  ana¬ 
lyst  and  outsourcing  executive. 
“There  is  still  a  viable  and 
clear  career  path  for  techies.” 

CIOs  say  that  as  long  as  ease 
of  use  remains  high  on  the 


IT  priority  list,  there  will  be 
room  for  the  most  technical 


% '■k'r'y 


:  Simpler-to-use  technology  still 
:  involves  a  lot  of  complexity. 

•  “IT  is  really  moving  in  two 

\  directions  at  once,”  observes 
:  Lynn  Vogel,  CIO  at  M.D.  An- 
:  derson  Cancer  Center.  “We’re 
;  paying  much  more  attention 
l  to  the  user  experience,  but  all 
l  of  that  makes  it  more  compli- 
:  cated  on  the  back  end.” 

•  As  a  result,  Vogel  says,  the 

•  center  “will  continue  to  invest 
\  in  deeper  and  deeper  technical 
’  skills.  Technology  is  getting 

;  easier  to  use,  but  to  make  it 

•  ‘  A-,- 

;  easier  to  use,  we  have  to  be  a 

•  lot  smarter  in  IT.” 

:  At  Direct  Energy,  CIO  Kamud 
I  Kalia  says  that  he  still  has  “a 

•  bias  toward  IT  guys  who  are 
l  classically  trained,  but  have 
:  the  mental  agility  to  take  on 


other  tasks.”  Technical  work 
will  always  need  to  be  done, 
even  if  you  opt  to  outsource  the 
bulk  of  your  IT  operations,  he 
observes. 

“If  you  don’t  have  someone 
technical  leading  and  manag¬ 
ing  that,  you  don’t  get  a  good 
following,  because  technical 
people  don’t  respect  nontech¬ 
nical  people,”  Kalia  says. 

“The  other  thing  you  don’t 
have  is  a  good  BS  detector,” 
he  adds.  “So  I  always  look 
for  not  just  a  slightly  techni¬ 
cal  background,  but  a  deep 
technical  background.  Even 
in  junior  people,  I  want  a  deep 
technical  background,  and 
then  I  expose  them  to  other 
things  in  the  company.” 

-  JULIA  KING 
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Infrastructure  Management  Work 

June  16-18, 2008  •  Gaylord  National  Resort  •  W, 


Attend  Infrastructure  Management  \fVorld  and  learn  abclit 

•  Migrating  legacy  infrastructure  to  the  dat|  center  of  the  future  ^ 

•  Capitalizing  on  virtualization  economies  { 

•  Green  2.0:  moving  from  talk  to  action  . 

•  Bulletproofing  the  data  center 


Topic  areas  include: 

•  The  Data  Center  of  the  Future 


Virtualization 

Configuration  Management 
Security/P  riva  cy  Manage  me  nt 


For  complete  details,  or  to  register: 
www.  i  mworldusa.com/cwad 


■  COVER  STORY 


We  are 
I  1  bringing  in 
new  career  lad¬ 
ders,  and  we’re 
adding  new  rungs 
to  existing  career 
ladders. 

Before,  [as  an 
IT  professional] 
you  were  an  ap- 


senior  application 
support  person 
and  so  on.  Now, 
we’re  getting  into 
the  equivalent 
of  a  partner  in  a 
consulting  firm. 
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called  a  consulta 
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We’ve  also 
added  several 
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chitects.  They’re 
focused  on  the 
overall  design 
of  how  things  fit 
together.  They’re 
responsible  for 
taking  the  design 
and  pushing  it 
through  the  tech¬ 
nical  processes* 
The  architect 
itionsare 
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sue  to  work  on.  “Maybe  the  CFO  says  there 
should  be  more  money  in  the  checkbook  and 
asks  why  there  isn’t,”  Carlson  says.  “They 
then  tear  apart  the  data  and  build  it  back  up 
to  come  up  with  an  answer.” 

The  primary  factor  behind  this  strategy  is 
an  overwhelming  volume  of  data.  “We  have 
tons  and  tons  of  data,  and  we  have  to  turn  it 
into  a  useful  product,”  Carlson  says.  “Putting 
data  in  a  business  context  is  absolutely  key.” 

A  college  degree  is  not  necessarily  required 
to  fill  these  roles,  Carlson  says.  It’s  the  curios¬ 
ity  that  counts.  And  finding  the  right  people 
hasn’t  been  easy.  Now  in  its  third  year,  Xcel’s 
IT  hiring  and  organizational  strategy  has 
about  a  60%  success  rate.  However,  “some 
people  have  been  terribly  unhappy”  in  the  less- 
structured  environment,  he  acknowledges. 

Xcel  has  sought  the  help  of  an  industrial 
psychologist  to  help  identify  potential  em¬ 
ployees  with  the  curiosity  and  drive  to  trawl 
through  data  and  uncover  information  that 
could  be  used  to  cut  costs,  improve  efficien¬ 
cy  and  generate  revenue. 

Although  job  titles  for  all  of  these  emerg¬ 
ing  roles  have  yet  to  be  standardized,  the 


Continued  from  page  26 
analysts  and  administrators, 
as  they  outsource  data  cen¬ 
ters  or  contract  for  software 
as  a  service. 

“Outsourcing,  globaliza¬ 
tion  and  the  cost  reduction 
for  WAN  technology  all 
work  to  eliminate  the  need 
for  systems  administrators, 
help  desk  people  or  develop¬ 
ers,”  says  Animas  CTO  Bog¬ 
dan  Butoi.  “We  don’t  want 
developers  on  our  staff  for 
all  of  these  technologies.  We 
pretty  much  have  kept  only 
business-savvy  people  who 
we  expect  to  be  partners 
in  each  department  and  to 
come  up  with  solutions. 

“I  don’t  know  if  at  some 
point  we  will  be  a  [com¬ 
pletely]  distributed  IT  de¬ 
partment  or  if  we’ll  stay  as  a 
central  IT  department,”  he 
adds.  “Right  now,  we’re  still 
an  IT  department,  but  we 
have  dedicated  IT  people  foi 
each  department.” 

For  instance,  IT  conducts 
focus  groups  with  physi¬ 
cians,  patients  and  other 
key  stakeholders  about  new 
products  and  software  for  the  glucose 
pumps,  insulin  meters  and  other  diabetes- 
related  products  that  Animas  develops. 
Another  telling  indicator  of  IT’s  deeply 
embedded  business  role:  “IT  is  measured  on 
how  many  original  products  come  from  us 
without  anybody  asking  for  them.  We’re  be¬ 
ing  measured  on  how  we’re  pushing  innova¬ 
tion,”  Butoi  says. 


FOSTERING  INNOVATION 

Xcel  Energy  Inc.  is  experimenting  with  mak¬ 
ing  some  traditional  IT  roles  and  responsi¬ 
bilities  somewhat  unstructured  so  as  not  to 
inhibit  innovation. 

“We’re  using  our  business  analytics  group 
to  start  this,”  explains  Mike  Carlson,  CIO  at 
the  $10  billion  electric  power  and  natural  gas 
utility.  “We’re  looking  for  people  who  are 
just  insatiably  curious  about  getting  an  an¬ 
swer  to  a  problem.  It’s  almost  a  hacker  men¬ 
tality.  These  are  people  who  keep  churning 
[data]  and  looking  for  relationships  and  data 
that  supports  hypotheses.” 

The  company  puts  these  workers  in  an 
undefined  role  and  gives  them  a  business  is- 
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overall  career  focus  seems  pretty  clear: 

It’s  all  about  business.  The  one  trend  that 
emerging  IT  titles  and  roles  seem  designed 
to  reflect  is  technology  professionals’  inex¬ 
tricable  connection  to  the  products  and/or 
services  their  companies  provide  and  not  to 
specific  technologies  such  as  Java  or  WANs. 

“You’ll  see  titles  like  ‘solutions  architect’ 
and  ‘product  architect’  that  convey  involve¬ 
ment  in  providing  the  product  or  service  to  a 
purchaser,  as  opposed  to  titles  like  ‘network 
engineer,’  ”  says  CSC’s  McCue. 

This  is  because  “the  notion  of  separation 
between  IT  and  operations  has  been  totally 
blurred,”  says  TNS  North  America  Inc.  CIO 
Enzo  Micali,  who  in  January  acquired  the 
additional  role  of  executive  vice  president  of 
operations  at  the  14,000-person  global  cus¬ 
tom  research  company. 

TNS  has  no  computer  programmers,  for 
example.  “Everyone  is  either  an  architect  or 
engineer  —  someone  who  has  to  have  deep 
technological  capabilities  to  automate  a  busi¬ 
ness  process  that  they  know  just  as  deeply,” 
Micali  says. 

At  Direct  Energy,  job  titles  —  especially 
titles  in  the  350-person  IT  organization 
—  are  purposely  kept  vague.  “We  keep  the 


titles  generic,  and  people  can  apply  descrip¬ 
tive  labels  to  what  they  do,”  says  Kalia. 

“I  want  them  to  think  of  themselves  as 
people  who  work  for  this  company,  not  peo¬ 
ple  who  work  for  this  company’s  IT  depart¬ 
ment,”  he  says.  “We  have  an  energy  supply 
business  to  manage.  That’s  our  business,  and 
we  want  to  do  it  as  efficiently  as  possible.  It 
doesn’t  really  matter  what  the  IT  job  is.” 

According  to  Anthony  Hill,  CIO  at  Golden 
Gate  University,  which  has  outsourced  virtu¬ 
ally  all  of  its  technology  operations,  “IT  is 
being  driven  out  of  the  business  of  managing 
technology.  Traditional  IT  has  been  about 
data  centers,  servers,  software  development, 
software  implementation,  and  the  mainte¬ 
nance  and  management  of  all  of  that.” 

Not  any  longer. 

“IT  will  focus  more  on  analysis  and  be 
more  involved  in  the  early  life-cycle  tasks  [of 
developing  products  and  services]  and  less 
on  technology  delivery,”  Hill  says.  “IT  will 
focus  more  on  simulation,  content  and  infor¬ 
mation  architecture.” 

The  bottom  line:  “Moving  away  from 
technology  management  doesn’t  take  IT  out 
of  the  picture,”  Hill  says.  “It  changes  what  IT 
does.”  ■ 


Business 
intelligence, 
online  presence, 
effective  informa¬ 
tion  sources,  mo¬ 
bility  and  superior 
infrastructure  are 
already  being  used 
as  competitive  ad¬ 
vantages,  but  this 
is  true  for  only  a  few 
industries.  I  think  IT 
professionals  will  be 
filling  this  gap  as 
industries  realize 
the  potential  to  com¬ 
pete  using  technol¬ 
ogy,  and  their  titles 
will  have  to  reflect 
that.  The  operative 
words  are  innova¬ 
tion  and  delivery 
-  both  easier  said 
than  done. 
yori  mnm, 
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Mobile  social  networking 
will  expand  to  include 
presence,  context  and  lo¬ 
cation,  says  Randy  Kerr, 
co-founder  of  Twango,  a 
media-sharing  site  with 
social  networking  fea¬ 
tures  that  Nokia  acquired 
last  August  and  renamed 
Share.  Here’s  what  those 
terms  mean: 

PRESENCE:  This  tells 
you  whether  the  people 
on  your  contacts  list  are 
available.  A  simple  ver¬ 
sion  of  presence  has  long 
been  part  of  instant  mes¬ 
saging  programs. 

CONTEXT:  Building  on 
presence,  this  tells  you 
not  only  whether  people 
are  available,  but  also 
in  what  context  they  are 
available.  For  example, 
someone  may  be  avail¬ 
able,  but  only  to  specific 
people  or  only  after  you 
arrive  at  a  certain  loca¬ 
tion. 

Or  you  could  receive 
calls  only  from  certain 
people  in  certain  circum¬ 
stances,  and  when  your 
location  or  other  cir¬ 
cumstances  change,  you 
could  receive  calls  from 
another  group  of  people. 

LOCATION:  With  the 
addition  of  GPS  and 
mapping  technologies, 
your  mobile  device  will 
know  where  you  and  oth¬ 
ers  in  your  network  are. 
Kerr  foresees  “in-house 
mashups”  of  services 
that  could  do  things  iike 
provide  GPS-based  direc¬ 
tions  to  a  location  shown 
in  a  photo  seen  on  Share. 

-  DAVID  QeJEAN 


■  MOBILE 
&  WIRELESS 


Presence, 
Context  and 
Location 


Social  Network! 
Gets  Moving 

Mobile  applications  may  ada 
new  richness  for  business  and 
personal  users.  By  David  DeJean 


CCORDING  to  most 
studies,  Nokia  Corp. 
sells  40%  of  all  mo¬ 
bile  phones  world¬ 
wide.  So  it  may  seem  un¬ 
usual  that  it’s  pouring  cash 
into  a  social  networking  Web 
site,  but  that’s  what  it’s  doing 
with  Ovi,  a  site  the  Finnish 
mobile  equipment  vendor 
launched  earlier  this  year. 

According  to  Randy  Kerr, 
Ovi  represents  how  mobility 
will  improve  social  network¬ 
ing.  Kerr  has  an  insider’s 
view  —  he  is  a  co-founder  of 
Twango,  a  media-sharing 


site  Nokia  acquired  last 
August  that  has  social  net¬ 
working  features.  Twango 
has  been  renamed  Share  and 
is  now  the  first  functioning 
piece  of  Ovi.  Kerr  and  his 
four  fellow  Twango  founders 
are  now  Nokia  employees. 

According  to  Kerr,  mix¬ 
ing  mobility  and  a  variety 
of  socially  oriented  services 
will  significantly  change  the 
nature  of  social  networking, 
including  how  it’s  used  in 
business.  He  and  Nokia  see 
a  brave  new  world  of  social 
networking  on  the  horizon. 


Nokia  has  been  on  some¬ 
thing  of  a  buying  spree  in 
the  past  year,  and  Kerr  says 
that  the  company’s  acquisi¬ 
tions  point  to  the  changes  we 
can  expect  in  mobile  social 
networking.  In  addition  to 
Twango,  Nokia  acquisitions 
include  Loudeye,  a  music 
download  service;  Gate5,  a 
developer  of  navigation  soft¬ 
ware;  and  Enpocket,  which 
has  a  mobile  ad  platform. 

In  its  biggest  acquisi¬ 
tion,  an  $8.1  billion  deal, 
Nokia  bought  Navteq,  a 
major  player  in  digital  map¬ 
ping  and  GPS  technology. 

In  another  major  deal,  the 
company  acquired  Avvenu, 
which  has  software  that  pro¬ 
vides  mobile  access  to  PC- 
based  files.  And  in  January, 
Nokia  acquired  Trolltech, 
the  developer  of  the  Linux- 
based  Qt  software  platform 
that’s  used  for  mobile  and 
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O  NOKIA 


desktop  applications  such  as 
Google  Earth  and  Skype. 

Also  on  the  list  is  N-Gage, 
an  older  Nokia  project  that 
started  out  as  hybrid  game/ 
cell  phone  hardware  but  has 
morphed  into  a  software 
platform  for  gaming  on 
smart  phones. 

PUTTING  IT  TOGETHER 

Ovi  will  be  the  centralized 
interface,  or  portal,  for  all  of 
these  seemingly  disparate 
services  and  more  to  come, 
according  to  Kerr.  Although 
most  will  include  social 
networking,  this  vision  isn’t 
about  putting  Facebook-style 
social  networking  on  mobile 
phones.  “It’s  not  social  net¬ 
working  just  for  the  sake  of 
social  networking,”  he  says. 

Rather,  Kerr  says,  the 
future  of  social  networking 
will  be  about  the  content 
—  and  context  —  of  the 
social  interactions.  The 


result  will  make  social  net¬ 
working  more  useful  and 
engaging  for  both  personal 
and  business  users. 

“By  socializing,  getting 
the  applications  out  of  the 
PC  and  into  context,  you  put 
the  focus  back  on  person-to- 
person  contact,”  he  says. 

In  this  evolving  vision  of 
social  networking,  differ¬ 
ent  and  improved  types  of 
social  interactions  can  grow 
naturally  from  this  new 
type  of  context- aware 
content,  Kerr  says. 

At  the  very  least,  mobility 
adds  immediacy  to  social 
networking  because  social 
interactions  will  occur  in  real 
time  more  frequently.  For  in¬ 
stance,  rather  than  waiting  to 
get  back  to  their  desktop  PCs, 
users  will  be  able  to  send 
updates  to  their  business  or 
personal  networks  from  their 
mobile  devices  immediately. 

A  more  complex  example 


of  this  type  of  real-time 
mobile  social  networking  is 
using  local  search  capabili¬ 
ties  to  find  a  restaurant  in  an 
unfamiliar  city  and  then  us¬ 
ing  GPS  technology  to  find 
nearby  business  contacts  to 
join  you.  Kerr  calls  this  “geo¬ 
social”  networking. 

Because  this  new,  intrinsi¬ 
cally  mobile  social  network¬ 
ing  will  grow  naturally  from 
being  mobile,  it  will  feel 
natural  to  many  users,  Kerr 
says.  He  adds  that  Nokia  and 
other  phone  vendors  will  be 
creating  mobile  devices  that 
work  not  just  on  cellular 
networks,  but  also  on  Wi-Fi 
and  WiMax  networks.  That 
will  significantly  increase 
the  users’  availability  —  and 
also  their  ability  to  connect 
with  others. 

For  now,  Ovi  is  a  being 
developed  as  a  consumer 
service,  but  business  uses 
are  inevitable,  Kerr  says.  He 


notes,  for  instance,  that  his 
Twango  service  originally 
had  no  enterprise  focus,  but 
that  changed  quickly. 

“We  found  people  were 
using  it  to  extend  their  busi¬ 
ness  contexts  as  well  as  their 
personal  lives,”  he  says.  “Con¬ 
tractors  were  sharing  photos 
of  progress  via  cell  phones 
with  customers  on  vacation, 
for  instance.  It  also  was  being 
used  for  large  file  transfers 
that  e-mail  just  wasn’t  that 
reliable  about  handling.” 

Kerr  says  he  has  come  to 
think  of  mobile  social  net¬ 
working  as  a  “long-tail  busi¬ 
ness  service,”  meaning  that 
it  will  grow  naturally  as  a 
business  tool  as  the  divisions 
between  users’  personal  and 
work  lives  continue  to  blur.  ■ 
DeJean  is  a  freelancer  who 
began  writing  about  comput¬ 
ers  after  Cobol  but  before 
C++.  Read  his  blog  at  Com- 
puterworld.com. 
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Q&A  BALA  IYER 


Deconstructing 
Google 


A  self-described 

‘Google  stalker’ 

examines  the 
secrets  to  its  success 
and  explains  how 
you  can  emulate  it. 


Educators  used  to  follow  the  auto  indus¬ 
try  because  that’s  where  all  the  lessons 
came  from,  says  Bala  Iyer.  Then  it  was 
Microsoft.  Now  it’s  Google.  In  this  month’s 
Harvard  Business  Review,  Iyer,  an  as¬ 
sociate  professor  of  technology  operations 
and  information  management  at  Babson 
College,  looked  deep  into  Google’s  DNA 
to  discern  what  makes  it  an  innovation 
machine.  Iyer  talked  with 
Kathleen  Melymuka  about 
what  he  and  co-author  Thom¬ 
as  H.  Davenport  discovered. 

Let’s  talk  about  some  of  the 
key  attributes  that  you  say 
contribute  to  Google’s  suc¬ 
cess.  The  first  is  “strategic 
patience.”  What  do  you  mean 
by  that?  Look  at  their  mis¬ 
sion  statement:  “to  organize 
the  world’s  information  and 
make  it  universally  accessible  and  use¬ 
ful.”  This  requires  a  long  period  to  exe¬ 
cute,  and  they’re  not  kidding.  CEO  Eric 
Schmidt  says  it’s  probably  going  to  take 
300  years.  When  a  company  has  such  a 
powerful  long-term  mission,  that  sets  it 
apart  from  the  others.  They  go  in  know¬ 
ing  they’re  in  for  the  long  haul.  Every 
action  they  take,  you  can  see  that. 

In  these  days  where  quarterly  results  are 
everything,  how  can  other  companies 
emulate  this?  Google  won’t  play  by  those 
rules.  Google  changes  the  rules  by  this 
mission  statement.  They  can  take  ac¬ 


tions  they  feel  are  good  for  the  long  term. 
Google  won’t  even  give  [Wall  Street] 
guidance  for  their  quarterly  results. 

This  is  a  basic  thing  in  business:  You 
want  to  make  sure  you  have  a  powerful 
mission  statement.  You  can  give  people 
a  lot  of  freedom  to  do  what  they  want 
to  do  and  be  productive  and  innovative 
when  you  have  a  mission  statement 
like  this  and  allow  people  the  freedom 
to  operate  within  it.  Companies  do  try, 
but  sometimes  the  mission  seems  like 
it’s  separate  from  the  company. 

How  does  Google’s  infrastructure  support 
innovation?  Everybody  thinks  that  when 
a  company  is  based  on  the  Internet,  you 
[get  a]  free  ride  on  the  Internet’s  infra¬ 
structure.  But  this  company  put  billions 
of  dollars  into  building  things  on  top  of 
the  Internet.  Google  has  its  own  operat¬ 
ing  system  that  works  on  top  of  the  In¬ 
ternet  and  is  based  on  Linux.  It  custom¬ 
izes  the  Internet  to  its  advantage. 

For  example,  Google  deals  with 

huge  amounts  of  data.  Data 
centers  are  very  important 
to  them.  They  need  to  be 
able  to  add  them  as  neces¬ 
sary.  When  Google  plugs 
in  a  data  center,  they  can 
make  it  operational  within 
eight  hours,  which  is  a 
phenomenal  capability, 
but  they  have  it  because 
they  made  this  investment. 
When  they  introduce  new 
products  and  services,  no 
one  questions  whether  their  infra¬ 
structure  can  support  it. 

I  imagine  this  is  something  almost  impos¬ 
sible  to  copy.  The  lesson  is  not  about 
building  another  billion-dollar  infra¬ 
structure,  but  about  how  much  you 
could  customize  to  your  own  advan¬ 
tage.  You  could  still  layer  your  own 
system  on  top  of  the  available  public 
infrastructure.  Isn’t  that  what  Sales- 
force.com  is  doing?  Amazon’s  cloud, 
eBay’s  infrastructure  —  that’s  what  it 
is.  The  platform  should  be  built  on  top 
of  the  available  Internet.  The  idea  is  to 


Google’s 
Innovation 
Ecosystem 

CONTENT  PROVIDERS 

(Media  companies  and  individuals) 

■  Create  information. 

■  Stimulate  user  interest. 

■  Provide  a  delivery  mechanism 
for  targeted  ads. 

ADVERTISERS 

(1  mi!lion+  companies  and  individuals) 

■  Deliver  relevant  ad  content 
to  search-identified  users. 

■  Generate  a  revenue  stream 
for  Google. 

■  Help  monetize  innovators’ 
new  offerings. 

USERS 

(132  million  unique  visitors 
per  day  as  of  November  2007) 

■  Search  for  information  and 
reveal  interests. 

■  Consume  targeted  advertising. 

■  Test  and  validate  innovations. 

■  Contribute  ideas  for  improvements. 

■  Use  new  products. 

INNOVATORS 

(Mashup  creators,  software 
vendors,  Google  engineers,  the 
open-source  community) 

■  Make  up  a  diverse  product- 
development  network. 

■  Develop  new  offerings  to 
keep  users  engaged. 

■  Generate  revenue  for 
themselves  and  Google. 

■  Extend  the  value  of  Google 
tools  and  technology. 

-  Adapted  from  the  Harvard  Business  Review 

put  your  own  secret  sauce  on  top  of  it 
to  support  your  ecosystem. 

This  platform  on  top  of  the  Internet 
even  supports  Google’s  product  develop¬ 
ment,  because  they  can  test-drive  prod¬ 
ucts  on  their  own  infrastructure  and  can 
allow  third  parties  to  write  products, 
which  we’re  now  calling  mashups. 

Let’s  talk  about  those.  Stacks  have  always 
been  a  big  part  of  our  industry.  And  the 
value  is  migrating  up  the  stack.  These 
guys  are  creating  higher  value.  An  ex¬ 
ample  is  Housingmaps.com.  Somebody 
thought  it  would  be  a  good  idea  to  com- 
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bine  Craigslist  and  Google  Maps  to  look 
at  properties  for  rent.  You  get  permis¬ 
sion  from  Google,  and  that’s  a  mashup. 

When  you  build,  you  have  to  pick  a 
platform,  and  each  has  own  API  and 
languages  and  so  on.  If  I’m  an  indepen¬ 
dent  software  developer,  what  languag¬ 
es  should  I  be  learning  today?  Google’s 
APIs,  Amazon’s,  eBay’s,  Salesforce.com’s. 
I  should  keep  track  of  the  number  of 
mashups  being  developed  on  these 
platforms  so  I  can  learn  these  APIs 
and  build  my  own  mashups  that  run  on 
them.  That  is  a  good  career  path.  You’ve 
got  to  watch  the  evolution  of  these  plat¬ 
form  companies  and  see  which  are  the 
next  operating  systems,  if  you  will. 

You  write  that  innovation  is  literally  built  into 
job  descriptions  at  Google.  How  does  that 
work?  Managers  are  required  to  spend 
70%  of  their  time  on  core  business,  20% 
on  related  but  different  projects,  and  10% 
on  anything  else.  [Technical  employees 
spend  80%  of  their  time  on  core  business 
and  20%  on  projects  of  their  own  choos¬ 
ing.]  It  doesn’t  have  to  be  on  a  daily  basis; 
they  can  chunk  it  or  spread  it  out. 


Sounds  good,  but  if  you  don’t  track 
it,  it’s  just  a  meaningless  statement. 

But  these  folks  track  it.  That  20%  time 
has  produced  phenomenal  products, 
including  Gmail,  AdSense  and  Google 
News.  When  you  have  creative  people 
and  you  make  this  part  of  the  job  de¬ 
scription,  it’s  a  great  fit. 

That  would  seem  to  be  something  any 
company  can  do,  if  they  commit  to  it. 

Every  company  should  do  it.  You  may 
think  it’s  goofing  off,  but  that’s  where  the 
best  ideas  come  from:  time  to  sit  down 
and  actually  think.  People  are  so  caught 
up  in  delivery  that  we  don’t  have  think 
time.  Everybody  who  wants  to  add  val¬ 
ue  knows  it  comes  from  our  free  time. 

Next,  Google  cultivates  a  taste  for  failure 
and  chaos.  How  so?  Failure  is  not  consid¬ 
ered  to  be  a  bad  thing.  They  encourage 
people  to  make  new  mistakes.  If  people 
are  not  feeling  stretched,  they’re  not 
trying  hard  enough.  In  this  business 
where  innovation  is  happening  on  a 
day-to-day  basis,  unless  you  push  the 
envelope,  you’re  not  going  to  be  lead¬ 


ing.  There’s  a  story  about  how  a  senior 
executive  made  a  big  mistake  that  cost 
several  million  dollars,  but  [Google 
co-founder]  Larry  Page  told  her  he  was 
happy  she  made  the  mistake.  Because 
if  they’re  not  making  mistakes,  they’re 
not  taking  enough  risks.  They  would 
rather  try  and  fail  than  sit  back  and  say, 
“What  if  we  had . . .  ?” 

And  finally,  Google  uses  data  to  vet  inspi¬ 
ration.  Is  that  backing  away  a  little  from 
failure  and  chaos?  We  didn’t  want  read¬ 
ers  to  feel  that  Google  is  totally  chaotic 
and  there  are  no  processes  in  place.  Ac¬ 
tually,  they  have  very  good  processes. 
They  listen  to  ideas.  Ideas  get  vetted 
on  an  internal  discussion  board.  Once 
ideas  come  through,  people  get  to  pres¬ 
ent  them  to  the  top  team  — 15  minutes 
per  idea.  And  they  don’t  care  about 
what  you  think;  they  want  data  to  back 
it  up.  So  first,  you  alpha-test  your  prod¬ 
uct,  find  out  what  users  are  telling  you, 
and  then  you  present  that.  They’re  very 
brutal  internally,  and  a  lot  of  ideas  get 
killed.  But  then  you  feel  confident  that 
the  right  ideas  are  being  pushed  up.  ■ 
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Long-range  planning  helps  a  Hess  Corn. 
IT  unit  to  partner  more  effectively  with 
its  businesses.  By  Thomas  Hoffman 


WHEN  JEFF  STEINHORN  joined 
Hess  Corp.  as  CIO  of  its 
marketing  and  refining 
division  in  the  summer  of 
2006,  he  discovered  within  the  first  two 
months  of  his  tenure  that  the  IT  orga¬ 
nization  had  historically  taken  a  short¬ 
term  approach  to  project  planning. 

That  approach  did  help  the  IT  group 
to  determine  the  equipment  it  would 
need  to  buy  and  the  personnel  it  would 
require  to  support  those  near-term 
initiatives.  But  project  plans  focused 
on  the  separate  needs  of  each  busi¬ 
ness  division,  says  Steinhorn,  so  there 
wasn’t  a  comprehensive  evaluation 
of  how  each  project  might  affect  the 
overall  IT  infrastructure.  And  it  hadn’t 
become  clear  how  Hess’  IT  projects  fit 
into  its  longer-term  business  objectives 
as  the  company  diversified  from  its 
roots  in  petroleum  and  expanded  into 
natural  gas  and  electricity  over  the 
past  decade. 

“It  became  pretty  clear  that  we 
needed  to  lay  out  a  long-term  strategy 
that  would  allow  us  to  figure  out  how 
IT'  could  support  our  businesses’  strat¬ 
egies  over  the  next  five  years,”  says 
Steinhorn,  who  was  previously  CIO  at 
Linens  ’n  Things  Inc.  and  was  recently 
promoted  to  corporate  CIO  at  Hess. 
The  situation  that  Steinhorn  walked 


into  when  he  joined  Hess  is  far  from 
unique.  “The  bulk  of  CIOs  are  in  a  pre¬ 
dicament  where  they  come  into  an  [IT] 
environment  that  doesn’t  have  a  long- 
range  plan,”  says  Bobby  Cameron,  an 
analyst  at  Forrester  Research  Inc. 

Prior  to  Steinhorn’s  arrival,  busi¬ 
ness  managers  in  Hess’  marketing 
and  refining  division  had  given  the 
IT  organization  decent  marks  for  the 
quality  of  its  work  and  for  getting 
projects  completed.  But  executives 
told  Steinhorn  that  it  typically  took 
too  long  for  the  IT  group  to  implement 
new  systems  or  deliver  enhancements 
to  existing  systems. 

Still,  Steinhorn  discovered  that  the 
IT  organization  had  a  wide  range  of 
other  issues  to  improve  upon.  Because 
project  work  had  been  separate  for 
each  business  division,  the  units’  sys¬ 
tems  often  didn’t  share  common  cus¬ 
tomer  or  market  information,  nor  were 
they  integrated  with  one  another,  says 


r  ^ 

It’s  an  equal 
partnership  now, 
where  we’re  going 
to  the  business  and 
partnering  on  ideas. 

T  CIO,  HESS  CORP. 
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At  a  Glance 

Hess  Corp.’s  marketing 

and  refining  division,  p 

Woodbridge,  N.J.  I 

BUSINESS:  An  integrated  en-  ■ 

ergy  services  company  with 
1,300-plus  retail  gasoline 
outlets  in  the  eastern  U.S.,  oil 
refining  and  marketing  opera-  £ 

tions,  and  electricity  and  natural 
gas  services  for  industrial  and 
commercial  customers  in  the 
Mid-Atlantic  and  Northeast. 

CORPORATE  CIO:  Jeff  Steinhorn 

IT  STAFF  SIZE:  80  application 
developers  and  50  employees 
who  support  the  IT  infrastructure  f 

2008  IT  BUDGET:  $45  million 

Carl  Schwartz,  director  of  planning 
and  architecture  for  Hess’  marketing 
and  refining  IT  group. 

So,  for  example,  a  business  manager 
in  the  oil  supplies  division  could  be 
looking  at  a  set  of  pricing  data  that 
didn’t  match  what  an  energy  market¬ 
ing  manager  was  seeing  on  his  screen, 
says  Steinhorn. 

EXPLORING  SUPPORT 

After  laying  out  a  proposal  to  develop  a 
five-year  IT  strategic  plan  at  an  execu¬ 
tive  meeting  in  the  fall  of  2006,  Stein¬ 
horn  got  the  nod  from  senior  manage¬ 
ment  to  move  ahead  with  the  effort. 

But  winning  that  support  didn’t  occur 
overnight,  particularly  since  Steinhorn 
was  new  to  the  company  and  hadn’t  yet 
established  relationships  with  members 
of  the  senior  management  team. 

To  help  gain  backing  for  the  stra¬ 
tegic  planning  initiative,  Steinhorn 
started  within  IT  by  tapping  some 
well-respected  veteran  IT  managers 
to  join  the  planning  team.  In  his  early 
conversations  with  the  president  of 
Hess’  marketing  and  refining  divi¬ 
sion,  Steinhorn  pointed  to  those 
managers’  involvement,  in  order  to  em¬ 
phasize  that  “it  wasn’t  just  me,  the  new 
guy,  who  was  supporting  this.” 

Another  challenge  Steinhorn  faced 
was  changing  the  mind-set  of  Hess’ 
business  executives,  who  had  tended 
to  look  upon  the  IT  staff  as  a  low-cost 
provider  and  were  used  to  making  IT 
investments  on  a  considerably  smaller 
scale.  “This  five-year  investment  isn’t 
huge,  but  it  would  require  more  invest- 
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ment  than  they  were  accustomed  to 
making,”  says  Steinhorn. 

He  gained  the  executives’  buy-in  by 
getting  them  to  quantify  the  anticipat¬ 
ed  project  benefits.  “I  would  ask  them, 
‘If  we  did  these  seven  retail  projects, 
what  would  be  the  bottom-line  benefits 
for  you?’  ”  says  Steinhorn.  “We  did  that 
with  each  of  the  business  areas,  and 
suddenly  the  costs  were  a  tenth  of  what 
all  the  benefits  were  expected  to  be.” 

A  STRATEGIC  PLATFORM 

Hess’  IT  strategic  planning  structure 
has  been  divided  into  three  com¬ 
ponents.  The  so-called  B  initiative 
represents  a  business  application  or 
business  process  improvement  effort 
that’s  aimed  at  increasing  revenue  or 
generating  cost  savings. 

Enabler,  or  “E,”  projects  correspond 
with  foundational  efforts  used  to  better 
support  Hess’  business  applications. 
These  include  the  implementation  of 
business  intelligence  and  analytical 
systems,  the  creation  of  a  master  data 
management  system  and  the  establish¬ 
ment  of  an  integration  framework  to 


connect  the  common  systems  used 
by  various  business  divisions  within 
Hess’  marketing  and  refining  group. 

A  third  area  encompasses  process, 
or  “P,”  improvements  within  the  IT 
organization  itself,  including  efforts  to 
create  a  standard  approach  to  applica¬ 
tion  development. 

Within  the  first  nine  months  of  Hess’ 
IT  strategic  planning  efforts,  Stein- 
horn’s  group  has  kicked  off  17  projects 
and  completed  seven  of  them,  including 
a  major  SAP  upgrade  and  a  reconfigura¬ 
tion  of  its  retail  energy  system. 

On  the  IT  process  side,  the  group 
developed  standardized  application 
development,  project  management  and 
IT  governance  methodologies,  and  it 
implemented  a  performance  tracking 
and  scorecard  system.  Computer  Sci¬ 
ences  Corp.  played  a  supporting  role, 
serving  as  the  project  management  of¬ 
fice  for  the  initiative. 

Through  the  first  year  of  the  five-year 
IT  strategic  planning  effort,  Hess’  IT 
organization  has  already  seen  improve¬ 
ments  by  having  a  more  consistent 
application  development  methodology 


applied  across  the  different  businesses 
it  supports,  says  Schwartz.  Business- 
related  projects  are  expected  to  deliver 
tens  of  millions  of  dollars  in  business 
benefits  once  they’ve  been  completed, 
adds  Steinhorn.  He  pegs  the  start-up  in¬ 
vestments  for  the  IT  strategic  planning 
effort  at  a  few  million  dollars. 

From  a  long-term  perspective,  the 
planning  initiative  “is  giving  us  the  plat¬ 
form  and  the  environment  to  improve 
our  ability  to  grow  with  the  business 
and  become  more  agile  as  the  business 
opportunities  change,”  says  Schwartz. 

Although  90%  or  more  of  Forrester’s 
clients  claim  to  have  long-term  IT 
strategies  in  place,  there  are  still  far 
too  many  IT  professionals  who  need 
to  think  more  strategically,  Cameron 
says.  “It’s  tough  for  IT  to  get  out  of  the 
mind-set  of  ‘this  is  an  LDAP  solution’ 
and  think  more  strategically  about  IT,” 
he  says.  “That’s  where  the  most  excit¬ 
ing  changes  are  occurring.” 

Steinhorn  can  see  it  within  his  own 
organization.  “It’s  an  equal  partnership 
now,”  he  says,  “where  we’re  going  to  the 
business  and  partnering  on  ideas.”  ■ 
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Microsoft 


Implement  Microsoft'  Forefront." 

Forefront  makes  defending  your  systems  easier.  It's  a  comprehensive,  simple- 
to-use,  integrated  family  of  products  that  helps  provide  protection  aci  )ss 
your  client,  server,  and  network  edge.  For  case  studies,  free  trials,  der  ios, 
and  all  the  latest  moves,  visit  easyeasier.com 


Forefront  is  business  security  software  for  client,  serv-- ,  and  ie  '  twork  dge. 
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■  SECURITY  MANAGER’S  JOURNAL  I  C.J.  KELLY 
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Confronting  the 
Application  Layer 


A  security  manager  can’t  simply  ignore 

the  things  she  doesn’t  understand.  So  it’s 
time  to  secure  Web-enabled  apps. 


An  indepen¬ 
dent  con¬ 
sultant  is 
evaluating 
our  security 
posture,  and  he’ll  be  here 
for  the  next  several  weeks. 
It’s  the  sort  of  thing  that 
makes  me  as  nervous  as  a 
mother  whose  child  is  ap¬ 
plying  to  colleges.  I  used 
to  be  a  security  consultant 
myself,  so  I  understand 
what  the  consultant  is 
looking  for.  I  have  pre¬ 
pared.  But  it’s  always 
nerve-wracking  to  see 
your  “children”  judged  by 
outsiders. 

I’m  glad  we’re  following 
this  security  best  practice, 
though  I  don’t  really  ex¬ 
pect  any  surprises.  In  fact, 
upon  receiving  the  first 
of  what  will  be  many  re¬ 
ports  from  the  consultant, 

I  broke  into  laughter,  for 
there  in  writing  was  what 
we  have  long  known  to  be 
our  weakest  link:  the  appli¬ 
cation  layer. 

I  don’t  make  any  claims 
of  being  an  expert  in 
application-layer  security. 

I  don’t  have  an  application 
development  background, 
and  I  find  myself  avoiding 
the  topic.  It’s  probably  not 
the  best  position,  but  I  don’t  i 
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know  what  to  do  about  it. 

I  am  fairly  expert  at  net¬ 
work  security,  Windows 
and  Unix  operating  system 
security,  physical  security, 
wireless  security,  building 
security  and  access  con¬ 
trols.  But  a  security  man¬ 
ager  can’t  secure  just  the 
things  she  understands.  All 
those  other  things  could  be 
tight  as  a  drum,  but  it’s  all 
for  naught  if  hackers  can 
get  in  through  the  applica¬ 
tion  layer. 

And  that’s  the  problem 
with  the  application  layer: 
Hackers  can  get  in  if  it’s 
not  secured,  because  most 
applications  have  been 
Web-enabled. 

Right  now,  we’re  pro¬ 
tecting  our  applications  by 
placing  the  Web  servers 
in  the  DMZ,  keeping  the 
application  and  database 
servers  behind  the  firewall, 
running  “pinhole”  con¬ 
nections  between  them, 
maintaining  rules  on 

a  The  problem 
with  the  applica¬ 
tion  layer  is  that, 
in  an  age  of  Web- 
enabled  apps, 
hackers  can  get  In. 


whether  a  server  can  pull 
or  push  information,  and 
mandating  access  control 
based  on  roles.  The  servers 
are  patched  on  a  regular 
basis  (weekly,  lately),  and 
we  scan  for  vulnerabilities. 
But  that’s  about  it.  I’m  try¬ 
ing  to  figure  out  how  to  en¬ 
sure  that  the  applications 
that  are  built  in-house  are 
properly  secured. 

I’m  not  sure  where  to 
start.  I  could  never  do 
a  source-code  audit.  I 
wouldn’t  even  know  what  I 
was  looking  for. 

SEEKING  ANSWERS 

To  gain  some  insight,  I 
turned  to  the  Nessus  open- 
source  tool  and  decided  to 
run  it  against  a  production 
server  that  is  accessible 
only  by  the  security  staff 
—  or  should  be.  We  run 
several  security  applica¬ 
tions  on  it.  If  I  happened 
to  knock  down  the  server 
with  my  probing,  I  had  ac¬ 
cess  to  bring  it  back  online. 

Nessus  provided  infor¬ 
mation  on  30  open  ports 
and  offered  73  notes  on 
those  ports,  eight  warnings 
and  zero  holes.  There  are 
a  few  things  we  can  do  to 
better  secure  the  server  at 
the  operating-system  level, 
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Trouble 

Ticket 

AT  ISSUE:  A  security 
consultant  quickly  turns 
up  problems  with  the 
application  layer. 

ACTION  PLAN:  Buckle 
down  and  finally  learn 
about  an  aspect  of  secu¬ 
rity  that’s  been  ignored. 
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but  I  didn’t  learn  much 

$ 

more  than  I  already  knew 
about  how  this  server  was 
configured.  And,  of  course,  { 
it’s  behind  a  firewall.  Not 
a  particularly  helpful  ex¬ 
ercise  in  understanding 
application-layer  secu¬ 
rity.  Any  host  in  the  DMZ 
would  certainly  not  be  lis¬ 
tening  on  that  many  ports. 

g 

All  the  application-layer 
vulnerabilities  spotlighted 
in  the  security  consultant’s  \ 
report  can  be  resolved  by 
application  patching.  But 
I’m  digging  deeper,  as  I 
tend  to  do,  because  of  the 
highly  sensitive  nature 
of  the  health  information 
that’s  on  our  network. 

And  I  do  know  that  there  I 
are  many  ways  of  protect¬ 
ing  applications.  We  can 
allow  only  certain  types  of 
communication  between 
hosts,  and  we  can  encrypt 
data.  But  I  have  to  wonder 

i 
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Ojoin  in 

To  join  the  discussion 
about  security,  go  to 

■  computerworld.com/ 
blogs/security. 


security  solutions.”  I  hope 
they  don’t  bother  unless 
they  can  bring  a  fresh  per¬ 
spective  to  this  topic.  And 
they  had  better  remember 
that  we  have  no  budget.  ■ 
This  week’s  journal  is  writ¬ 
ten  by  a  real  security  man¬ 
ager,  “C.J.  Kelly,”  whose 
name  and  employer  have 
been  disguised  for  obvious 
reasons.  Contact  her  at 
mscjkelly@yahoo.com. 


what  else  we  can 
do.  I’m  sure  that 
vendors  will  read 
that  as  an  invita¬ 
tion  to  tell  me  all 
about  their  “ap¬ 
plication-layer 


■  OPINION 

Paul  Glen 

Changing  the  Subject 

IF  YOU  want  to  really  help  your  organization,  one  of  the 
more  subtle  things  you  need  to  learn  to  do  is  to  effective¬ 
ly  change  the  subject. 

Over  the  years  that  I’ve  advised  technical  managers, 
young  and  old,  some  patterns  have  become  apparent.  One  is 
that  most  seem  to  go  through  a  series  of  distinct  stages  in 


i 

<  their  understanding  of  the 
[  role  of  manager.  There  are 
[  different  stages  for  differ- 

I  ent  aspects  of  the  role,  but 
!  the  patterns  are  relatively 
;  consistent. 

When  it  comes  to  beliefs 
J  about  managers’  roles 
s  in  information  flow,  the 
I  pattern  is  interesting  and 

«  instructive. 

* 

I 

J  STAGE  1:  The  Translator 

!  At  this  stage,  the  man- 
!  ager  tends  to  see  herself  as 

•  merely  a  link  in  the  verti- 

j  cal  information  chain.  She 
‘  takes  orders  from  above, 

{  translates  them  to  those 
!  below,  collects  status  re- 
i  ports  from  those  below  and 
j  consolidates  them  for  those 

*  above.  It’s  an  active,  but  not 
I  influential,  role.  The  back 

I  rooms  at  the  United  Na¬ 
tions  are  filled  with  highly 

<  intelligent  people  wearing 
headsets,  listening  to  one 

J  language  and  simultane- 
)  ously  speaking  the  same 
!  thing  in  a  different  one. 

It’s  an  essential  function, 

J  but  no  one  thinks  of  these 
;  people  as  diplomats. 

STAGE  2:  The  Defender 

In  the  second  stage,  the 


manager  sees  herself  as 
defender  of  her  territory 
and  underlings. 

The  passive  link  in 
the  information  chain  is 
transformed  into  a  heroic 
leader,  placing  herself  in 
the  path  of  the  hostile  on¬ 
slaught.  The  dangers  may 
come  from  above,  from 
peer  organizations  or  from 
outsiders,  but  the  manager 
begins  to  see  her  role  as 
not  just  passing  along 
information,  but  also  influ¬ 
encing  the  content  of  the 
information  to  the  benefit 
of  her  group. 

This  stage  may  come 
quickly  or  not,  depending 
on  the  toxicity  of  the  gen¬ 
eral  environment.  If  the 
world  outside  a  manager’s 
group  is  particularly  hos¬ 
tile  or  her  previous  boss 
was  a  particularly  weak 
defender,  it  tends  to  come 
quickly. 

■  In  the  second 
stage,  the  manager 
sees  herself  as 
defender  of  her 
territory  and 
underlings. 


STAGE  3:  The  Participant 

Eventually,  the  manager 
begins  to  see  herself  as 
more  than  a  conduit  or  a 
belligerent,  but  as  a  partic¬ 
ipant  in  a  managerial  con¬ 
versation.  She  takes  on  the 
role  of  adviser  to  the  boss, 
collaborator  to  peers  and 
mentor  to  subordinates. 
She  now  interprets  infor¬ 
mation,  shapes  it,  processes 
it,  and  selectively  passes 
it  on  or  withholds  it  as 
needed  to  move  a  broader 
conversation:  the  discus¬ 
sion  of  how  the  collective 
should  deal  with  its  reality. 

The  manager  is  now 
part  of  the  larger  system 
of  making  an  organization 
go,  contributing  to  deci¬ 
sions,  taking  positions, 
influencing  policies.  By 
now,  she  views  the  outside 
world  as  a  more  nuanced 
place,  both  hostile  and 
filled  with  possibilities. 

STAGE  4:  The  Agenda  Setter 

In  the  final  stage,  the  man¬ 
ager  takes  part  in  an  even 
more  abstract  conversa¬ 
tion:  that  of  setting  the 
agenda  for  the  managerial 
conversation  itself.  Now 
the  manager  begins  to 


help  shape  the  perceived 
reality  of  the  organization, 
not  just  the  managerial  dis¬ 
cussion  of  how  to  respond 
to  that  reality.  Setting  the 
agenda  involves  inter¬ 
preting  facts,  opinions, 
predictions  and  feelings, 
as  well  as  prioritizing  and 
analogizing. 

But  more  than  anything,  \ 
it  involves  building  a 
consensus  among  a  man¬ 
agement  team  about  what 
should  be  on  the  common 

I 

agenda  and,  just  as  impor¬ 
tant,  what  should  not  be  on  J 
that  agenda. 

Taking  part  in  the 
agenda-setting  conversa¬ 
tion  is  not  as  simple  as  it 
may  seem.  As  managers 
become  aware  of  this  role,  l 
they  tend  to  be  rather 

s 

ham-fisted  in  their  first 

I 

attempts  to  force  issues 
into  the  group  conscious¬ 
ness,  blurting  out  their 
ideas  in  open  meetings 
or  proposing  solutions  to 
problems  that  no  one  else 
perceives. 

Learning  to  advance  the  J 
agenda  is  largely  the  skill 
of  changing  the  subject  of 
the  managerial  conversa¬ 
tion.  To  advance  your 
managerial  skills,  assess 
your  stage  of  development 
and  start  thinking  about 
the  next  stage.  ■ 

Paul  Glen  is  the  founder  of 
the  GeekLeaders.com  Web 
community  and  author  of 
the  award-winning  book 
Leading  Geeks:  How 
to  Manage  and  Lead  Peo¬ 
ple  Who  Deliver  Technol¬ 
ogy  (Jossey-Bass,  2003). 
Contact  him  at  info@ 
paulglen.com. 
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MARKETPLACE 


Ranked  #1  in  Category* 


Cartridge  World  is  the  world  leader  in  printer  inkjet  and  toner 
cartridge  refilling  and  empowers  you  with  the  freedom  to  grow. 

•  Very  low  investment  cost 

•  Comprehensive  training  and  support 

»  More  than  1,700  retail  locations  worldwide 

•  Master  franchise  licenses  and  multi-unit  franchises  available 

To  start  your  own  Cartridge  World  franchise  call 
888.9MEF1LL  or  visit  cartridgeworldusa.com 

*8ased  on  Er^epreps^gSO  2005 


#  Cartridge  M 


Instantly  Search  Terabytes  of  Text 

i/mmoBmumsw- 


♦  dozens  of  indexed,  unindexed,  fielded 
data  and  full-text  search  options 
(including  Unicode  support  for 
hundreds  of  international  languages) 


♦  "Bottom  line:  dtSearch  manages  a 
terabyte  of  text  in  a  single  index 
and  returns  results  in  less  than  a 
second"  -  InfoWorld 

#"For  combing  through  large 

amounts  of  data,"  dtSearch  "leads 
the  market"  -  Network  Computing  { 

♦  dtSearch  "covers  all  data  sources ...  j 
powerful  Web-based  engines" 

-  eWEEK 

♦  dtSearch  “searches  at  blazing 
speeds"  -  Computer  Reseller  News 
Test  Center 


♦  file  parsers  /  converters  for 
hit-highlighted  display  of  all  popular 
file  types 

♦  Spider  supports  static  and  dynamic  web 
data;  highlights  hits  while  displaying 
links,  formatting  and  images  intact 

i 

♦  API  supports  .NET,  C++,  Java,  databases, 
etc.  New  .NET  Spider  API 

I 

The  Smart  Choice  for 
Text  Retrieval®  since  1991 


Contact  dtSearch  for 
fuily-functional  evaluations 


See  www.dtsearch.com  for  hundreds 
more  reviews,  and  hundreds  of 
developer  case  studies 


1-800-IT-FINDS  •  www.dtsearch.com 


He  was  a  hardworking  farm  boy. 

She  was  an  Italian  supermodel. 

He  knew  he  would  have  just 
one  chance  to  impress  her. 


Rosetta  Stone?  The  fastest  and 
easiest  way  to  learn  ITALIAN  . 


Discover  a  whole  new  world  with  Rosetta  Stone?1  the  world's  leading  language-learning  software. 

Only  Rosetta  Stone  uses  Dynamic  Immersion®  to  teach  you  a  language  quickly  and  efficiently,  without  tedious 

translation  and  grammar  drills. 

•  You’ll  experience  our  Dynamic  Immersion  as  you  match  real-world  images  to  words  spoken  by  native 
speakers.  There  is  no  translation  or  memorization.  Instead,  you  become  quickly  engaged,  the  way  you  learned 
your  first  language...  for  a  faster,  easier  wav  to  learn. 

•  Our  patent-pending  Voice  Recognition  Technology  evaluates  your  speech  and  coaches  you  to  more  accurate 
pronunciation,  so  you’ll  be  speaking  faster  and  more  naturally. 

•  And  only  Rosetta  Stone  has  Adaptive  Software  which  tracks  your  progress  and  then  customizes  every  lesson 
based  on  your  individual  needs,  for  faster  and  more  effective  fluency. 

Discover  Rosetta  Stone  The  Fastest  Wav  to  Learn  a  Language.  Guaranteed” 


Call 

(888)  232-9198 


Online 

RosettaStone.com/cws048 


Chinese  •  Hebrew 
Irish  •  Japanese 

Now  Available! 


Level  1 
Level  1&2 
Level  1,2&3 


-$£W 

-$-B39r 

■$49«r 


NOW 

NOW 

NOW 


*188.10 

*305.10 

*449.10 


100%  GUARANTEED 

SIX-MONTH  MONEY-BACK 


©2008  Rosetta  Stone  Ltd,  All  rights  reserved.  Patent  rights  pending.  Discount  otter  not  to  be 
combined  with  other  otters,  and  subject  to  change  without  notice,  Six-Month  Money-Bach  offer 
is  limited  to  purchases  made  directly  tram  Rosetta  Stone  and  does  not  include  return  shipping. 


Use  promotional  code  cws048  when  ordering. 

Offer  expires  July  31,  2008. 


RosettaStone* 
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The  Power  of  Three 


Imagine  your  data  center,  to  the  power  of  three. 

Make  it  a  reality  with  our  newly  expanded  power  distribution  offering. 
Pulizzi®  and  Aphel®  are  the  newest  members  of  Eaton®,  creating  the 
broadest  range  of  ePDUs  on  the  market. 

Eaton  is  making  the  selection  of  enclosure  power  distribution  units 
easy  with  three  simple  questions: 

1.  How  much  power  do  you  need? 

2.  What  functionality  do  you  need? 

3.  Which  inputs  and  outputs  do  you  need? 

Three  innovators...  Three  questions...  ePDU  completes  the  PowerChain® 
Management  solution  that  will  propel  your  data  center  to  the  next  level. 

Visit  us  atwww.powerware.com/ePDU  or  call  877.785.4994 

to  find  out  what  the  power  of  three  can  do  for  you. 


High  density  power  in  excess  of  23.000  watts 


Powerware 


Eaton,  Povvarwarc,  pulitti,  Apliel .yPfitl,  and  PovyetChain  are  trademarks  d  Eaton  Corporation.  S2088  Eaton  Corporation.  All  rights  rsservid. 
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What  do  Generation  Y  employees  look  for  in  a  job?  Pretty  much  the 
same  things  older  workers  look  for.  Here  are  Gen  Y’s  rankings  of  job 
considerations,  on  a  scale  of  1  to  10,  with  10  being  the  most  important: 

Salary  9.05 


Benefits 

8.86 

Opportunities  for  advancement 

8.74 

Company  location 

8.44 

Company  leadership 

7.95 

Company  reputation/brand  recognition  7.56 

Job  title 

7.19 

In-house  training  programs 

6.95 

Tuition  reimbursement 

6.44 

Diversity 

8.07 

Company’s  philanthropic  efforts 

6.06  ' 

Source:  Robert  Half  Technology  survey  of  1,007 

college-educated  employees  ages  21  to  28,  tall  2007 


y  ^  j 

IT:  Economy’s 


The  8%  Increase  in  IT 
employment  last  year 
brought  the  total  number 
of  employed  IT  workers  in 
the  U.S,  to  3.76  million, 
according  to  the  Bureau  of 
Labor  Statistics.  The  IT  unem¬ 
ployment  rate  fell  just  a  tenth 
of  a  percentage  point,  though, 
from  2.2%  at  the  end  of  2006, 
suggesting  that  many  of  the 
people  who  had  been  looking 
for  IT  work  at  the  beginning  of 
the  year  were  still  looking  12 
months  later  and  that  the  new 
jobs  went  to  others.  Those 
“others”  could  include  IT  pros 
who  hadn’t  been  counted  in 


the  unemployment  figures 
because  they  had  abandoned 
their  job  searches,  as  well  as 
people  drawn  to  IT  from  other 
fields  or  foreign  workers. 

The  prospects  for  the 
profession  remain  bright. 
The  BLS  has  extended  its  esti¬ 
mate  of  job  growth  for  various 
professions,  which  previously 
covered  the  period  from  2004 
to  2014.  Now,  in  an  estimate  for 
2006-16,  it  says  employment 
in  the  computer  and  math¬ 
ematical  sciences  will  see  the 
most  growth,  adding  822,000 
jobs  during  the  decade,  for  an 
overall  growth  rate  of  24.8%. 


292k  2.1% 


Number  of  U.S.  IT  jobs 
added  in  2007. 


IT  unemployment  rate 
at  the  end  of  2007. 


SOURCE:  U.S.  BUREAU  OF  LABOR  STATISTICS.  YEAR-END  HOUSEHOLD  SURVEY 


a  q&a 

Thomas  O. 
Davenport 

The  principal  from 
professional  sendees  firm 

Towers  Perrin  talks  about 
keeping  IT  workers  engaged. 


What  are  the  biggest  mistakes 
that  employers  make  with 
respect  to  keeping  IT  staffers 

engaged?  One  of  the  major  short¬ 
falls  we  see  is  that  employers  are 
placing  too  much  emphasis  on  pro¬ 
grammatic  or  tangible  rewards.  Or¬ 
ganizations  need  to  understand  that 
programmatic  factors  like  bonuses 
and  stock  options  have  a  big  impact 
when  recruiting  people.  But  when  it 


comes  to  engaging  and  retaining  IT 
workers,  organizations  sometimes 
place  too  much  emphasis  on  these 
factors  and  not  enough  on  relation¬ 
ship  management  techniques. 

What  are  some  techniques 

that  work?  I  was  talking  with  folks 
at  a  major  Silicon  Valley  organization 
the  other  day,  and  one  of  the  things 
we  both  emphasize  is  career  mobil¬ 


ity.  People  want  to  be  challenged 
and  work  for  an  organization  that 
innovates;  they  want  mobility,  and 
they  want  novelty.  Organizations  that 
encourage  innovation  have  a  leg  up. 
Meanwhile,  the  No.  1  retention  driver 
is,  “My  manager  inspires  enthusiasm 
for  work.”  IT  professionals  want  to 
work  on  an  engaging  local  team  that 
has  a  lot  of  energy. 

What  steps  can  IT  manag¬ 
ers  take  to  reassure  staffers 
about  their  roles  in  light  of 
the  current  economy?  The  only 
thing  that  keeps  an  IT  job  safe  is 
the  extent  to  which  it  contributes  to 
business  strategy.  Whether  they’re 
supporting  a  service  culture  where 
customer  service  is  critical  or  a 
manufacturing  environment  where 
cost  management  is  critical,  IT 
people  can  contribute  to  preserving 
their  own  jobs.  Innovation  is  also  key. 


The  more  they  get  away  from  main¬ 
tenance-type  activities,  the  more 
power  they  have  over  their  own  fate. 

What  are  some  best  practices 
in  recruiting  IT  professionals? 

What  we  find  through  multiple  sur¬ 
veys  that  have  been  conducted  on 
this  topic  is  that  the  No.  1  attraction 
driver  in  IT  globally  is  competitive 
pay.  No.  2  is  interesting  work. 

If  you  read  the  top  10  reasons  for 
working  at  Google  on  their  Web 
site,  [the  emphasis  is  on  it  being] 
fun  and  engaging.  Compensation 
is  the  fifth  element  [listed].  The  list 
focuses  on  the  company’s  culture 
and  the  opportunity  to  work  with 
other  talented  folks.  They’re  saying, 
"Come  here.  You’ll  work  with  great 
people  and  do  really  interesting 
things,  and  by  the  way,  you’ll  make 
good  money  along  the  way.” 

-THOMAS  HOFFMAN 
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IT  careers 


SR  SW  ENGGS  (CSISSE0208): 
Lead  to  design,  develop  appls  in 
C#,  ASP.Net,  C++,  VB,  Oracle, 
PL/SQL,  Sybase,  SAP,  ABAP; 
gather,  analyze  reqts;  reco  solu¬ 
tion;  interact  to  decide  on  tech  & 
process  for  dvlpmnt;  review  con¬ 
ceptual  &  physical  design  doc; 
train  team,  end  users.  Req:  BS  or 
equiv  in  CS/Engg/related  &  5  yrs 
exp.  SYS  ANALYSTS  (CSIS 
A0308):  Analyze,  design,  cus¬ 
tomize,  implement,  integrate  for 
buss  &  engg  envir  using  Clear 
Case,  Clear  Quest,  Requisite  Pro, 
DB2,  Oracle,  Windows,  Unix;  per¬ 
form  sys  analysis  &  admin;  main¬ 
tain  &  troubleshoot;  doc.  Req:  BS 
(will  accept  comb  of  edu  &  exp)  or 
foreign  equiv  in  CS  /  Sci  /  Engg.  / 
Related  &  2  yrs  exp  in  Clear  Case. 
FT  Comp  Salary  Trave.  Resume: 
HR,  Computech  Systems,  Inc., 
10800,  Midlothian  Tpke,  Ste  246, 
Richmond,  VA  23235 


Educational  Systems  Developer 
(Houston,  TX)  Provide  program¬ 
ming  services  for  academic 
instructional  and  collaboration 
systems  integration  that  facili¬ 
tate  access  to  institutional 
repositories,  effective  informa¬ 
tion  object  access  and  cross 
systems  functionalities  utilizing 
knowledge  of  UNIX,  Linux,  and 
Windows  operating  systems, 
ability  to  write  code  in  Java  as 
well  as  multiple  flavors  of  C, 
HTML,  and  XML,  and  an  under¬ 
standing  of  XML/XHTML,  XSLT 
markup  protocols  and  concepts. 
Bachelor’s  degree  in  Computer 
Science  or  related  field  and 
experience  required.  Apply:  Rice 
University  http://jobs.rice.edu 
(Requisition  #  0800C) 


Computer  Professional  ( Bristol, 
PA  )  IT  firm,  Jr.  Lvl  positions 
Programmer  Analysts,  S/w  Eng, 
Sys  Analysts,  Business  Analyst 
to  develop,  create, &  modify 
general  comp,  applications  s/w 
or  specialized  utility  programs. 
Analyze  user  needs  &  develop 
S/w  solutions. 

Sr.  Lvl  position,  Sr.  S/w  Eng, 
Sr.  Business  Analyst,  IT  Mgr, 
MIS  Mgr,  ITS  Director  to  plan, 
direct,  or  coordinate  activities  in 
such  fields  as  electronic  data 
processing,  information  sys¬ 
tems,  systems  analysis, 
Business  analysis  &  comp,  pro¬ 
gramming.  Apply  w/2  copies  of 
resume  to  H.R.D,  Surya 
Systems  Inc,  1200  New 
Rodgers  Road,  Suite  C7A, 
Bristol,  PA- 19007 


Programmer  Analyst  w/2  yrs 
exp  to  analyze,  dsgn,  dev, 
implmt  &  test  client  server  & 
web  applies  using  Core  Java 
(JDK),  Swing,  UML,  HTML, 
DHTML,  JavaScript,  JSP,  EJB, 
Servlets,  Struts  Frame  Work, 
Oracle  &  SQL  on  Unix  & 
Windows  operating  system. 
Write  stored  procedures,  func¬ 
tions  &  triggers.  Mail  res  to: 
KGF  Associates,  Inc.,  777 
Washington  Rd,  Ste  1,  Parlin, 
NJ  08859.  Job  loc:  Parlin,  NJ 
or  in  any  unanticipated  Iocs  in 
USA. 


Project  Manager  needed 
w/Masters  in  CS  or  Engg  or 
Math.  &  6  mos  exp  to  manage, 
plan,  organize,  direct,  analyze  & 
coord  s/ware  projects  using 
Java,  .NET,  Delphi,  C,  C++  & 
Shell  Scripting  on  Windows 
based  systms.  Dsgn  &  dvlp 
SDLC  principles  &  testing  pat¬ 
terns.  Gather  bus.  reqmts  & 
manage  day-to-day  operations. 
Perform  risk  analysis  &  contin¬ 
gency  planning.  Supv.  2  QA 
Analysts.  Mail  resumes  to:  Triple 
Point  Technology,  Inc.  301 
Riverside  Ave.,  Westport,  CT 
06880.  Job  loc:  Westport,  CT. 


Programmer  Analyst  -  analyze 
&  design  system  development 
projects  to  resolve  complex 
business  IT  problems;  docu¬ 
ment  code,  monitor,  test  sys¬ 
tems  to  meet  SFHP  reqts.  Use 
Job#  PA-1 ;  reply  to: 
resumes@sfhp.org.  or  San 
Francisco  Health  Plan,  210  3rd 
St.,  7th  Floor,  SF,  CA  94103. 


/ - ; - v 

Looking  for 

something  new? 

You’ve  come  to  the 
right  place! 


Check  back  with  us  weekly 
for  fresh  listings  placed  by  top 
companies  looking  for  skilled 
professionals  like  you! 
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IT  MANAGERS  &  SOFTWARE 
ENGINEERS/SYSTEMS  ANA¬ 
LYSTS  (LEAVENWORTH)  KS: 
Dvlp  computer  applications 
software  /specialized  utility 
progrms.  mASTERS  OR 
BACHELORS  W/5  YRS  EXP 
FOR  IT  MANAGERS  AND 
BACHelors  w/2  yrs  exp  FOR 
SOFTWARE 
ENGINEERS/SYSTEMS  ANA¬ 
LYSTS.  RESPOND  TO  HRD, 
MOGUL  STAFFING  SOLU¬ 
TIONS  INC.,  1119,  OSAGE 
STREET,  LEAVENWORTH, 
KS  66048. 


Project  Lead  needed  in  FL 
&  other  unanticipated 
client  sites  using  SAP  r/3, 
SAP  CRM,  ABAP,  VB.net, 
MATLAB,  LABVIEW, 
OPTIMAS,  Bio-Signal  & 
Image  Processing,  & 
Medical  Sensories.  Mail 
resume  to:  Dolphin 

Solutions,  9567  Westover 
Club  Cir,  Windermere,  FL 
34786. 


c/3 

Searching  for  diverse  IT  Talent? 

U 

Let  ComputerWorld  IT  careers  put  your  recruitment 

message  in  front  of  over  1,400,000 

5— 1 

03 

qualified  IT  professionals! 

O 

Contact  Laura  Wilkinson  for  details 

H 

at  laura  wilkinson@itcareers.net  or 

call  847.441.8877 

Marlabs,  Inc  is  an  Edison,  NJ-based  software  and  technology  consulting 
company.  The  candidates  may  be  assigned  to  work  at  client  sites  across  the 
US.  We  have  multiple  openings  for  IT  Professionals  (Project  Managers/ 
Team  Leads  /  Software  Engineers,  Programmer  Analysts,  System/Network 
Analysts  and  Administrators,  Database  Administrators  and  Application 
Developers,  System  and  Business  Analysts,  Quality  Assurance/testing)  with 
several  of  the  following  skills  and  relevant  experience: 

Web  Technologies: 

Web  Tools  such  as  J2EE,  Java,  JSP,  Java  Servlets,  EJB,  XML, .NET,  HTML, 
DHTML,  UML,  ASP,  Visual  Interdev,  MTS,  &  PERL/CGI,  PHP,  Visual 
Basic/Visual  Studio. 

Web  Application  Servers  such  as  WebObjects,  SUN  JES,  Web  Logic, 
WebSphere,  ColdFusion,  ATG,  Netscape,  IIS  &  IBOLT,  Dominos, 
Documentum,  iplanet,  Oracle,  J2EE,  and  related  applications. 

Internet,  Intranet  and  other  Web  technologies  and  applications  -  including 
Architecture,  Server-Side  and  Middle-Tier  development. 

Application  Development: 

Application  Development  integrating  database  backend,  a  middle  tier  serv¬ 
er  and  a  GUI/Web  interface. 

Object  Oriented  Application  development  using  technologies  such  as  C, 
C++,  C##,  Java,  etc. 

Statistical  Applications  such  as  SAS,  SPSS,  Minitab,  and  Matlab 
Development  Tools  such  as  C,  C++,  PHP,  PERL,  Visual  Studio,  Visual  C++, 
Visual  Basic,  PowerBuilder,  Lotus  Notes  &  .NET  (including  VB.NET, 
ASP.NET  and  C##.NET). 

Data  Mining  /  Data  warehousing/Business  Intelligence  using  applications 
such  as  Business  Objects,  SAS,  Brio,  Informatica,  Microstrategy,  Statistica, 
Eagle  Pace,  Cognos  &  ERWIN. 

ERP/CRM  such  as  Oracle  Applications,  Siebel,  Peoplesoft,  Broadvision  & 
SAP,  Peoplesoft,  BAAN,  JD  Edwards,  Microsoft/Great  Plains. 

Databases  (mainframe/midrange/client-server)  such  as  Oracle,  Informix, 
Sybase,  SQL  Server,  MySQL,  DB2  and  Cobol. 

Systems  Administrators  with  Experience  in  several  of  the  following:  System 
(UNIX,  Windows  /  Windows  NT,  LINUX,  RTOS,  Sun  Solaris,  AIX,  HP):; 
Network  (LAN/WAN/  CISCO/HP)  Administration,.  Security  Analysis  and 
Design,  Database  Administration. 

Business  Analysts,  Security,  and  Quality  Assurance  professionals  for  any  or 
all  of  the  above  technologies  and  various  industry  sectors  such  as  business, 
finance,  telecom,  pharmaceutical  etc.  Also  specialists  in  regulatory  /  statu¬ 
tory  compliance  such  HIPAA  or  SarbOx,  business  analysis,  security/audit 
policy,  certification  and/or  accreditation. 

Also  seek  professionals  in  Statistics,  Biotechnology,  Bioinformatics  and/or 
related  fields  to  assist  clinical  trial  process  and  interpret  the  resulting  clinical 
data. 

All  positions  require  Bachelor’s  or  equivalent  and  2-5  years  of  industry  expe¬ 
rience,  or  a  Master’s  degree.  Relocation  possible  to  client  locations  which  will 
be  anywhere  in  the  continental  US.  All  responses  to  this  ad  must  include  the 
Job  Code  reference  80402.  Marlabs  is  an  equal  opportunity  employer.  Submit 
resume  to:  Marlabs,  Inc.  do  ComputerWorld  Box  9171,  Framingham,  MA  01701 


Nabors  Corporate  Services, 
Inc.,  located  in  Houston, 
Texas,  seeks  degreed  and 
experienced  Systems  Analysts 
to  design  and  develop  web 
applications,  analyze  software 
requirements,  perform  soft¬ 
ware  system  design,  unit  and 
integration  testing,  system 
installation  and  system  mainte¬ 
nance.  Submit  resume  to 
Teresa  Thomas  via  email  at 
teresa.thomas@nabors.com. 
Please  put  SA07  on  resume. 


Computer  Professional 
(Westbury,  NY)  IT  firm: 
Programmer  Analysts,  S/w 
Engineers, Sys  Analysts  to 
Dvlp, create  and  modify  gener¬ 
al  comp. applications  s/w  or 
specialized  utility  programs. 
Analyze  user  needs  and  dvlp 
S/w  solutions.  Apply  w/2 
copies  of  resume  to  NYCE  C 
Corp.  790,  Summa  Avenue, 
Westbury,  NY  11590 


SR  JAVA  DEVELOPER 
(SJD0308):  Design,  develop, 
implement  sw  applns  in  OOAD, 
Java,  J2EE,  Web  Sphere,  Struts, 
Design  Patterns,  Oracle,  SQL 
Server,  Windows;  install,  config 
Websphere  appln  server;  pro¬ 
vide  security  strategy;  reco  solu¬ 
tions;  supervise  testing,  doc; 
train  users.  Req:  MS  in  CS/CE. 
FT  Comp  Salary  Travel. 
Resume:  HR,  Keystone 

Technologies,  Inc.,  2536 
Countryside  Blvd,  #  117, 

Clearwater,  FL  33763 


Software  Engineer  to  design, 
develop,  implement  and  main¬ 
tain  data  warehouse  and  deci¬ 
sion  support  systems,  utilizing 
Informatica,  SQL,  OLAP,  and 
relational  database  technolo¬ 
gies.  Requires  Bachelors  or 
equivalent-level  degree  in 
Computer  Science, 

Engineering,  Mathematics  or 
closely  related  field  Send 
resume  to:  R.  Heinlein, 
Ferguson  Consulting,  Inc., 
1350  Timberlake  Manor 
Parkway,  Suite  450, 
Chesterfield,  MO  63017.  EOE. 
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!  But  You  Just  Know 
j  He’ll  Find  a  Way 

!  New  project  manager  is  hired 
I  by  this  specialty  manufac¬ 
turer,  and  he  soon  learns 
where  he  stands  in  the  peck- 
;  ing  order.  Reports  an  IT  sup- 
!  port  pilot  fish  on  the  scene: 

“In  the  past  two  days,  he  once 
came  down  with  his  wireless 
mouse  in  hand,  complaining 
it  wasn’t  working  - 1  took 
off  the  piece  of  Post-it  note 
covering  the  laser  and  handed 
it  back.  Then  he  called  today, 
j  indicating  he  couldn’t  connect 
;  to  the  network  - 1  told  him  to 
plug  his  network  cord  back 
in.  I  applaud  him,  though;  he 
;  understands  potential  data- 
;  corruption  issues  and  has 
chosen  his  retribution  path  to 
be  noncomputer  in  nature.” 


It’s  Like  April 
Ail  Year  Long 

At  this  government  agency’s 
programming  office,  there’s 
a  legal  requirement  that  a  PC 
must  lock  itself  after  15  min¬ 
utes  of  inactivity.  But  what’s 
the  most  effective  way  to 
enforce  it?  “We  have  taken  to 
pranking  any  individual  who 
leaves  his  desk  without  lock¬ 
ing  his  desktop,”  says  a  pilot 
fish  there.  “If  we  find  one  of 
our  co-workers’  machines  left 
open,  we  have  a  handy  little 
program  we  coded  that  is  al¬ 
ways  available  on  disk  for  the 
small-pranks  section  of  our 
team.”  The  program  starts  by 
flashing  on-screen  warnings 
about  viruses  and  hacking 
found.  Then  it  takes  a  screen- 
shot  of  the  desktop,  makes 


TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


that  the  desktop  background 
image,  puts  all  the  desktop 
icons  in  a  subdirectory  and 
locks  the  workstation.  When 
the  panicked  user  sees  the 
warnings  and  can’t  click  on 
any  desktop  icons,  he  calls 
desktop  support  -  which  runs 
another  program  to  undo  all 
the  rearranging,  then  lectures 
the  user  on  the  importance  of 
locking  his  machine  to  protect 
against  “hackers.”  “We  want¬ 
ed  to  add  a  message  about  an 
e-mail  that  was  sent  to  their 
boss,  copying  everyone,”  fish 
adds.  “But  we  wouldn’t  want 
anyone  rushing  to  apologize 
to  his  boss  unnecessarily, 
would  we?” 

Seen  One, 

Seen  ’Em  All 

Road  warrior  complains  that 
his  cell  phone  was  stolen  at 
an  airport,  and  now  he  can’t 
log  into  his  laptop,  either. 

Pilot  fish,  checking  the  laptop: 
“Is  this  your  laptop?”  User: 
Yes,  it’s  my  laptop  and  my 
computer  bag.  Fish:  “This 
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isn’t  your  laptop.  The  log-in 
screen  shows  a  computer 
name  and  domain  that  don’t 
belong  to  our  company.”  Fish 
figures  it  was  swapped  with 
an  identical  machine  and  bag 
at  airport  security,  and  the 
PC  vendor  helps  track  down 
the  swapee.  “But  when  our 
user’s  laptop  was  returned, 
the  hard  drive  had  been  refor-  ; 
matted,”  reports  fish.  “Since 
they  couldn’t  log  into  it,  they 
thought  it  had  a  virus  and 
wiped  the  hard  drive.  The  cell 
phone  was  never  recovered.” 

I 

■  Sharky  is  careful  to  pick 
up  just  the  right  true  tales 
of  IT  life.  Send  me  yours  at 
sharky@computerworld.com,  ! 
and  you’ll  get  a  stylish  Shark 
shirt  if  I  use  it. 
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O  NEED  TO  VENT  YOUR  SPLEEN? 

Toss  some  chum  into 
the  roiling  waters  of 
Shark  Bait.  It’s  therapeutic! 

sharkbait.computerworld.com. 


©CHECKOUT  Sharky’s  blog,  browse  the 
Sharkives  and  sign  up  for  Shark  Tank  home 
delivery  at  computerworld.com/sharky. 
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Not  Dead  Yet 

* 

i 

I 

IT  WASN’T  supposed  to  be  this  way:  Last  week,  IBM 
gave  the  AS/400  a  new  lease  on  life.  At  the  Common 
2008  user  group  meeting  in  Nashville,  IBM  announced 
that  its  venerable  minicomputer  hardware  is  being 
j  merged  with  its  Unix  product  line,  once  called  the  RS/6000 
i  (see  story,  page  16).  Result:  The  system  formerly  known  as  the 
j  AS/400  just  got  cheaper,  more  modern  —  and  harder  to  kill. 
Don’t  you  just  hate  it  when  things  like  that  happen? 


After  all,  we  don’t  want 
these  legacy  systems  to 
survive.  We  want  them 
gone.  We  want  to  move 
their  users  to  something 
that’s  easier  for  central 
IT  to  handle:  mainframes 
if  necessary,  but  prefer¬ 
ably  x86  server  farms. 

That  way,  we  can 
manage  everything  in 
a  consistent  way,  with 
maximum  efficiency  and 
without  any  distractions 
from  legacy  hardware  or 
software. 

Business  effectiveness? 
Uh,  sure,  if  you  have  to 
bring  that  up.  But  mainly, 
we  want  standardization. 
We  want  convergence. 
We  want  it  over  the 
carcasses  of  those  dead 
minicomputers. 

And  IBM  isn’t  helping. 

True,  our  business 
units  that  use  minicom¬ 
puters  like  them.  They 
like  the  pretty-close- 
to-lights-out  operation. 
They  like  the  fact  that 


programmers  know  ex¬ 
actly  how  the  built-in 
database  will  work. 

They  might  not  like 
the  business-critical  cus¬ 
tom  applications  they’ve 
ported  from  one  IBM 
minicomputer  model 
to  the  next  for  30  years, 
from  the  System/34  to  the 
System/36  and  38  to  the 
AS/400  to  the  iSeries  to 
the  System  i.  But  they  like 
the  fact  that  they  don’t 
have  to  spend  their  IT 
budgets  to  rewrite  those 
apps  or  even  figure  out 
decades  of  accumulated 
business-logic  sediment. 

And  they  didn’t  much 
like  paying  a  premium  for 
what,  in  recent  years,  was 
the  same  hardware  IBM 

H  it  actually  looks 
|  like  the  minicom¬ 
puter  is  not  dead 
-  and  may  even  he 
getting  better.  And 
thafs  fust  wrong. 


used  for  its  Unix  work¬ 
stations  and  servers.  But 
they  paid  it.  They  were 
pragmatic:  It  was  the  most 
cost-effective  way  to  go. 

Now  IBM  has  elimi¬ 
nated  that  price  premium 
and  also  made  the  new 
common  hardware  more 
attractive,  with  smaller 
footprints,  blade  form 
factors,  fancy  water  cool¬ 
ing,  sound  dampers  and 
reduced  power  consump¬ 
tion.  It  actually  looks  like 
the  minicomputer  is  not 
dead  —  and  it  may  even 
be  getting  better.  And 
that’s  just  wrong. 

Why  can’t  Big  Blue  be 
like  Hewlett-Packard, 
which  has  driven  its  HP 
3000  customers  crazy 
by  trying  for  years  to  kill 
off  their  minicomputers? 
HP  stopped  selling  the 
machine  in  2003  and  has 
attempted  to  drive  a  stake 
through  its  heart  ever 
since.  Sure,  those  users 
have  managed  to  pressure 


HP  into  extending  some 
level  of  support  until  the 
end  of  2010.  But  they’re 
living  under  a  death  sen¬ 
tence,  and  they  know  it. 

Like  IBM,  those  users 
don’t  get  it.  We  in  IT  have 
a  blueprint,  a  road  map,  a 
grand  plan.  It’s  based  on 
best  practices,  industry 
standards  and  every¬ 
thing  else  that  will  make 
the  IT  department  look 
slick,  smart  and  vision¬ 
ary  —  especially  in  the 
eyes  of  IT  industry  deep- 
thinkers. 

Keeping  legacy  appli¬ 
cations  alive  just  because 
they’re  crucial  to  the 
business?  Keeping  legacy 
minicomputers  going  just 
because  that’s  the  only 
way  to  run  those  legacy 
apps?  What  kind  of  IT 
best  practice  is  that? 

Pragmatism  be 
damned.  We  know  the 
way  things  are  supposed 
to  be.  Just  because  it’s 
useful,  cost-effective  and 
mission-critical  doesn’t 
mean  it’s  right. 

The  minicomputer 
is  supposed  to  be  dead. 
There’s  no  place  for  it  in 
the  grand  plan.  All  the 
really  smart  IT  deep- 
thinkers  say  so. 

Isn’t  it  time  for  IT  to 
take  a  stand  against  it 
—  even  if  that  kills  us?  ■ 
Frank  Hayes  is  Computer- 
world’s  senior  news 
columnist.  Contact  him 
at  frank_hayes@ 
computerworld.com. 
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Paving  the  new  wireless 
roads  to  your  business 
and  enterprise 

Mobile  &  Wireless  World 

June  9-10, 2008  *  Marriott  Doral  Golf  Resort  &  Spa,  Miami,  Florida 

Attend  Mobile  &  Wireless  World  and  learn  how  to: 

•  Maximize  the  value  of  your  mobile-intensive  applications 

•  Improve  business  processes  by  mobilizing  field  workers 

•  Capitalize  on  convergence/unified  communications 

•  Safeguard  your  wireless  infrastructure 

Topic  areas  include: 

•  Maximizing  the  Value  of  Mobile-Intensive  Applications 

•  Improving  Business  Processes  by  Mobilizing  Field  Workers 

•  Capitalizing  on  Convergence/Unified  Communications 

•  Safeguarding  the  Wireless  Infrastructure 

•  Adopting  a  Sensible  Device  Management  Strategy 

•  Seizing  Value  from  Emerging  Wireless  Technologies 


FEATURED 


FOR  2008  INCLUDE: 


Timothy  Cox 

Chief  information  Officer, 
OnStar/GM 


Randall  Headrick 

Chief  Information  Officer, 
Air  National  Guard 


Mark  Hilbush 

Vice  President  Information 
Services,  UPS 


Mike  Pennella 

Senior  Vice  President  and 
e-Commerce  Product 
Development  Executive, 
Bank  of  America 


For  complete  details,  or  to  register: 

www.mwwusa.com/cwad 


Introducing  IBM  BladeCenterS  Express.  Now  you  can 
combine  Quad-Core  Intel®  Xeon®  processor-based 
blade  servers,  storage,  switches  and  management  tools 
in  one  small  chassis.  It’s  easy  to  set  up.  Easy  to  use. 


SIMPLIFY  AND  MANAGE  YOUR  I.T.WITH  A  SINGLE  CHASSIS. 


Easy  to  manage.  It’s  a  simple  way  to  simplify  your  IT. 

From  the  people  and  Business  Partners  of  IBM: 

It’s  innovation  made  easy. 


PN: 8886E1U _  _ _ _ 

Up  to  six  application  blades  with  the  ability  to  expand  to  multiple 
virtual  blades  _ 

Integrated  storage  built  into  the  chassis  -  3.6TB  SAS  or  6TB  SATA 
3-year  customer  replaceable  unit  and  on-site  limited  warranty1 2 


IBM  BLADECENTER  HS21  EXPRESS 

$2,359  (SAVE  $249) 

OR  $62/MONTH  FOR  36  MONTHS1 * * 

PN: 8853E1 U 


IBM  SYSTEM  STORAGE  DS3300  EXPRESS 

$4,545  (SAVE  $450) 

OR  $1 20/MONTH  FOR  36  MONTHS1 

PN:  172631 E 


Features  up  to  two  high-performance  Dual-Core  or  Quad-Core  Intel  Support  for  dual-port  and  hot-swappable  SAS  disks  at  10,000  and  15,000 

Xeon  Processors  RPM  speeds 

1GB  standard/16GB  maximum  memory  per  blade  (32GB  with  Memory  and  Expandable  by  attaching  up  to  three  EXP3000S  or  a  total  of  48  hard  disk  drives 

I/O  Expansion  Unit) _ _ 3-year  limited  warranty  on  parts  and  labor2 

3-year  customer  replaceable  unit  and  on-site  limited  warranty2 


IBM  Express  “Bundle  and  Save” 

We  bundle  our  Express  systems  to  give  you  the 
accessories  you  need  -  while  saving  you  money  on 
the  hardware  you  want.  Act  now.  Available  now  through 
ibm.com  and  IBM  Business  Partners. 


mmM 


express 

advantage7 


ibm.com/systems/onebox 
1  866-872-3902  (mention  6N8AH01  A) 


1 .  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  States  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  government  customers.  Monthly  payments  provided  are  for  planning  purposes 
only  and  may  vary  based  on  your  credit  and  other  factors.  Lease  otter  provided  is  based  on  an  FMV  lease  of  36  monthly  payments.  Other  restrictions  may  apply.  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice. 

2.  IBM  hardware  products  are  manufactured  tram  new  parts,  or  new  and  serviceable  used  parts.  Regardless,  our  warranty  terms  apply.  For  a  copy  of  applicable  product  warranties,  visit  ibm.com/servers/support/machine_.warranties  or  write  to:  Warranty 

Information,  PO.  Box  12195,  RTP,  NC  27709,  Attn:  Dept.  JDJA/B203.  IBM  makes  no  representation  or  warranty  regarding  third-party  products  or  services,  including  those  designated  as  ServerPraven*  or  ClusterProven:''  Telephone  support  may  be  subject  to 

additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  tectinician.  On-site  warranty  is  available  only  for  selected  components.  Optional  same-day  service  response  is  available  on  select  systems 

at  an  additional  charge  IBM,  the  IBM  logo,  IBM  Express  Advantage,  IBM  BladeCeriter,  System  x  and  System  Storage  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries. 
For  a  complete  list  of  IBM  trademarks,  see  ibm.com/legal/copyirade.shtml.  Intel  and  Xeon  are  registered  trademarks  of  Intel  Corporation.  All  other  products  may  be  trademarks  or  registered  trademarks  of  their  respective  companies,  All  prices  and 

savings  estimates  are  based  upon  IBM's  estimated  retail  selling  prices  as  of  August  1, 2007.  Prices  and  actual  savings  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  and  actual  savings  to  end  users  may  vary. 
Products  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  Prices  are  subject  to  change  without  notice. 

Starting  price  may  not  include  a  hard  drive,  operating  system  or  other  features.  Contact  your  IBM  representative  or  IBM  Business  Partner  for  the  most  current  pricing  in  your  geographic  area.  ©2008  IBM  Corporation.  All  rights  reserved. 


